@t2000/cli 5.23.0 → 5.24.1

package/dist/{dist-TCGFVCLO.js → dist-57KQG4RN.js}

@@ -13046,16 +13046,6 @@ function hexToBytes(hex) {
   }
   return array3;
 }
-function utf8ToBytes(str) {
-  if (typeof str !== "string")
-    throw new Error("string expected");
-  return new Uint8Array(new TextEncoder().encode(str));
-}
-function kdfInputToBytes(data, errorTitle = "") {
-  if (typeof data === "string")
-    return utf8ToBytes(data);
-  return abytes(data, void 0, errorTitle);
-}
 function concatBytes(...arrays) {
   let sum2 = 0;
   for (let i = 0; i < arrays.length; i++) {
@@ -13071,12 +13061,6 @@ function concatBytes(...arrays) {
   }
   return res;
 }
-function checkOpts(defaults2, opts) {
-  if (opts !== void 0 && {}.toString.call(opts) !== "[object Object]")
-    throw new Error("options must be object or undefined");
-  const merged = Object.assign(defaults2, opts);
-  return merged;
-}
 function createHasher(hashCons, info = {}) {
   const hashC = (msg, opts) => hashCons(opts).update(msg).digest();
   const tmp = hashCons(void 0);
@@ -43095,10 +43079,10 @@ var require_abort = __commonJS({
   "../../node_modules/.pnpm/asynckit@0.4.0/node_modules/asynckit/lib/abort.js"(exports$1, module) {
     module.exports = abort;
     function abort(state) {
-      Object.keys(state.jobs).forEach(clean3.bind(state));
+      Object.keys(state.jobs).forEach(clean4.bind(state));
       state.jobs = {};
     }
-    function clean3(key) {
+    function clean4(key) {
       if (typeof this.jobs[key] == "function") {
         this.jobs[key]();
       }
@@ -45271,8 +45255,8 @@ var require_common = __commonJS({
         createDebug.namespaces = namespaces;
         createDebug.names = [];
         createDebug.skips = [];
-        const split2 = (typeof namespaces === "string" ? namespaces : "").trim().replace(/\s+/g, ",").split(",").filter(Boolean);
-        for (const ns of split2) {
+        const split3 = (typeof namespaces === "string" ? namespaces : "").trim().replace(/\s+/g, ",").split(",").filter(Boolean);
+        for (const ns of split3) {
           if (ns[0] === "-") {
             createDebug.skips.push(ns.slice(1));
           } else {
@@ -55083,7 +55067,7 @@ var init_dist7 = __esm({
             }
             return r;
           };
-          MPrime.prototype.split = function split2(input, out) {
+          MPrime.prototype.split = function split3(input, out) {
             input.iushrn(this.n, 0, out);
           };
           MPrime.prototype.imulK = function imulK(num) {
@@ -55097,7 +55081,7 @@ var init_dist7 = __esm({
             );
           }
           inherits2(K256, MPrime);
-          K256.prototype.split = function split2(input, output) {
+          K256.prototype.split = function split3(input, output) {
             var mask = 4194303;
             var outLen = Math.min(input.length, 9);
             for (var i = 0; i < outLen; i++) {
@@ -60727,7 +60711,7 @@ var require_bn2 = __commonJS({
         }
         return this;
       };
-      BN2.prototype.add = function add3(num) {
+      BN2.prototype.add = function add4(num) {
         var res;
         if (num.negative !== 0 && this.negative === 0) {
           num.negative = 0;
@@ -62275,7 +62259,7 @@ var require_bn2 = __commonJS({
         }
         return r;
       };
-      MPrime.prototype.split = function split2(input, out) {
+      MPrime.prototype.split = function split3(input, out) {
         input.iushrn(this.n, 0, out);
       };
       MPrime.prototype.imulK = function imulK(num) {
@@ -62289,7 +62273,7 @@ var require_bn2 = __commonJS({
         );
       }
       inherits2(K256, MPrime);
-      K256.prototype.split = function split2(input, output) {
+      K256.prototype.split = function split3(input, output) {
         var mask = 4194303;
         var outLen = Math.min(input.length, 9);
         for (var i = 0; i < outLen; i++) {
@@ -62423,7 +62407,7 @@ var require_bn2 = __commonJS({
         }
         return this.m.sub(a)._forceRed(this);
       };
-      Red.prototype.add = function add3(a, b) {
+      Red.prototype.add = function add4(a, b) {
         this._verify2(a, b);
         var res = a.add(b);
         if (res.cmp(this.m) >= 0) {
@@ -65577,7 +65561,7 @@ var require_bn3 = __commonJS({
         }
         return this;
       };
-      BN2.prototype.add = function add3(num) {
+      BN2.prototype.add = function add4(num) {
         var res;
         if (num.negative !== 0 && this.negative === 0) {
           num.negative = 0;
@@ -67257,7 +67241,7 @@ var require_bn3 = __commonJS({
         }
         return r;
       };
-      MPrime.prototype.split = function split2(input, out) {
+      MPrime.prototype.split = function split3(input, out) {
         input.iushrn(this.n, 0, out);
       };
       MPrime.prototype.imulK = function imulK(num) {
@@ -67271,7 +67255,7 @@ var require_bn3 = __commonJS({
         );
       }
       inherits2(K256, MPrime);
-      K256.prototype.split = function split2(input, output) {
+      K256.prototype.split = function split3(input, output) {
         var mask = 4194303;
         var outLen = Math.min(input.length, 9);
         for (var i = 0; i < outLen; i++) {
@@ -67404,7 +67388,7 @@ var require_bn3 = __commonJS({
         }
         return this.m.sub(a)._forceRed(this);
       };
-      Red.prototype.add = function add3(a, b) {
+      Red.prototype.add = function add4(a, b) {
         this._verify2(a, b);
         var res = a.add(b);
         if (res.cmp(this.m) >= 0) {
@@ -71540,21 +71524,21 @@ var require_short = __commonJS({
       var npoints = this._endoWnafT1;
       var ncoeffs = this._endoWnafT2;
       for (var i = 0; i < points.length; i++) {
-        var split2 = this._endoSplit(coeffs[i]);
+        var split3 = this._endoSplit(coeffs[i]);
         var p = points[i];
         var beta = p._getBeta();
-        if (split2.k1.negative) {
-          split2.k1.ineg();
+        if (split3.k1.negative) {
+          split3.k1.ineg();
           p = p.neg(true);
         }
-        if (split2.k2.negative) {
-          split2.k2.ineg();
+        if (split3.k2.negative) {
+          split3.k2.ineg();
           beta = beta.neg(true);
         }
         npoints[i * 2] = p;
         npoints[i * 2 + 1] = beta;
-        ncoeffs[i * 2] = split2.k1;
-        ncoeffs[i * 2 + 1] = split2.k2;
+        ncoeffs[i * 2] = split3.k1;
+        ncoeffs[i * 2 + 1] = split3.k2;
       }
       var res = this._wnafMulAdd(1, npoints, ncoeffs, i * 2, jacobianResult);
       for (var j = 0; j < i * 2; j++) {
@@ -71662,7 +71646,7 @@ var require_short = __commonJS({
     Point.prototype.isInfinity = function isInfinity() {
       return this.inf;
     };
-    Point.prototype.add = function add3(p) {
+    Point.prototype.add = function add4(p) {
       if (this.inf)
         return p;
       if (p.inf)
@@ -71793,7 +71777,7 @@ var require_short = __commonJS({
     JPoint.prototype.neg = function neg() {
       return this.curve.jpoint(this.x, this.y.redNeg(), this.z);
     };
-    JPoint.prototype.add = function add3(p) {
+    JPoint.prototype.add = function add4(p) {
       if (this.isInfinity())
         return p;
       if (p.isInfinity())
@@ -72139,7 +72123,7 @@ var require_mont = __commonJS({
       var nz = c.redMul(bb.redAdd(this.curve.a24.redMul(c)));
       return this.curve.point(nx, nz);
     };
-    Point.prototype.add = function add3() {
+    Point.prototype.add = function add4() {
       throw new Error("Not supported on Montgomery curve");
     };
     Point.prototype.diffAdd = function diffAdd(p, diff) {
@@ -72417,7 +72401,7 @@ var require_edwards = __commonJS({
       }
       return this.curve.point(nx, ny, nz);
     };
-    Point.prototype.add = function add3(p) {
+    Point.prototype.add = function add4(p) {
       if (this.isInfinity())
         return p;
       if (p.isInfinity())
@@ -73493,7 +73477,7 @@ var require_hmac_drbg = __commonJS({
       this._reseed = 1;
       this.reseedInterval = 281474976710656;
     };
-    HmacDRBG.prototype._hmac = function hmac3() {
+    HmacDRBG.prototype._hmac = function hmac4() {
       return new hash.hmac(this.hash, this.K);
     };
     HmacDRBG.prototype._update = function update(seed) {
@@ -73507,32 +73491,32 @@ var require_hmac_drbg = __commonJS({
       this.K = this._hmac().update(this.V).update([1]).update(seed).digest();
       this.V = this._hmac().update(this.V).digest();
     };
-    HmacDRBG.prototype.reseed = function reseed(entropy, entropyEnc, add3, addEnc) {
+    HmacDRBG.prototype.reseed = function reseed(entropy, entropyEnc, add4, addEnc) {
       if (typeof entropyEnc !== "string") {
-        addEnc = add3;
-        add3 = entropyEnc;
+        addEnc = add4;
+        add4 = entropyEnc;
         entropyEnc = null;
       }
       entropy = utils.toArray(entropy, entropyEnc);
-      add3 = utils.toArray(add3, addEnc);
+      add4 = utils.toArray(add4, addEnc);
       assert3(
         entropy.length >= this.minEntropy / 8,
         "Not enough entropy. Minimum is: " + this.minEntropy + " bits"
       );
-      this._update(entropy.concat(add3 || []));
+      this._update(entropy.concat(add4 || []));
       this._reseed = 1;
     };
-    HmacDRBG.prototype.generate = function generate(len, enc, add3, addEnc) {
+    HmacDRBG.prototype.generate = function generate(len, enc, add4, addEnc) {
       if (this._reseed > this.reseedInterval)
         throw new Error("Reseed is required");
       if (typeof enc !== "string") {
-        addEnc = add3;
-        add3 = enc;
+        addEnc = add4;
+        add4 = enc;
         enc = null;
       }
-      if (add3) {
-        add3 = utils.toArray(add3, addEnc || "hex");
-        this._update(add3);
+      if (add4) {
+        add4 = utils.toArray(add4, addEnc || "hex");
+        this._update(add4);
       }
       var temp = [];
       while (temp.length < len) {
@@ -73540,7 +73524,7 @@ var require_hmac_drbg = __commonJS({
         temp = temp.concat(this.V);
       }
       var res = temp.slice(0, len);
-      this._update(add3);
+      this._update(add4);
       this._reseed++;
       return utils.encode(res, enc);
     };
@@ -92819,17 +92803,107 @@ var Ed25519PublicKey = class extends PublicKey2 {
   }
 };
 init_dist2();
-init_utils2();
+function isBytes3(a) {
+  return a instanceof Uint8Array || ArrayBuffer.isView(a) && a.constructor.name === "Uint8Array" && "BYTES_PER_ELEMENT" in a && a.BYTES_PER_ELEMENT === 1;
+}
+function anumber3(n, title = "") {
+  if (typeof n !== "number") {
+    const prefix = title && `"${title}" `;
+    throw new TypeError(`${prefix}expected number, got ${typeof n}`);
+  }
+  if (!Number.isSafeInteger(n) || n < 0) {
+    const prefix = title && `"${title}" `;
+    throw new RangeError(`${prefix}expected integer >= 0, got ${n}`);
+  }
+}
+function abytes2(value, length, title = "") {
+  const bytes = isBytes3(value);
+  const len = value?.length;
+  const needsLen = length !== void 0;
+  if (!bytes || needsLen) {
+    const prefix = title && `"${title}" `;
+    const ofLen = "";
+    const got = bytes ? `length=${len}` : `type=${typeof value}`;
+    const message = prefix + "expected Uint8Array" + ofLen + ", got " + got;
+    if (!bytes)
+      throw new TypeError(message);
+    throw new RangeError(message);
+  }
+  return value;
+}
+function ahash2(h) {
+  if (typeof h !== "function" || typeof h.create !== "function")
+    throw new TypeError("Hash must wrapped by utils.createHasher");
+  anumber3(h.outputLen);
+  anumber3(h.blockLen);
+  if (h.outputLen < 1)
+    throw new Error('"outputLen" must be >= 1');
+  if (h.blockLen < 1)
+    throw new Error('"blockLen" must be >= 1');
+}
+function aexists2(instance, checkFinished = true) {
+  if (instance.destroyed)
+    throw new Error("Hash instance has been destroyed");
+  if (checkFinished && instance.finished)
+    throw new Error("Hash#digest() has already been called");
+}
+function aoutput2(out, instance) {
+  abytes2(out, void 0, "digestInto() output");
+  const min2 = instance.outputLen;
+  if (out.length < min2) {
+    throw new RangeError('"digestInto() output" expected to be of length >=' + min2);
+  }
+}
+function clean2(...arrays) {
+  for (let i = 0; i < arrays.length; i++) {
+    arrays[i].fill(0);
+  }
+}
+function createView2(arr) {
+  return new DataView(arr.buffer, arr.byteOffset, arr.byteLength);
+}
+function utf8ToBytes(str) {
+  if (typeof str !== "string")
+    throw new TypeError("string expected");
+  return new Uint8Array(new TextEncoder().encode(str));
+}
+function kdfInputToBytes(data, errorTitle = "") {
+  if (typeof data === "string")
+    return utf8ToBytes(data);
+  return abytes2(data, void 0, errorTitle);
+}
+function checkOpts(defaults2, opts) {
+  if (opts !== void 0 && {}.toString.call(opts) !== "[object Object]")
+    throw new TypeError("options must be object or undefined");
+  const merged = Object.assign(defaults2, opts);
+  return merged;
+}
+function createHasher2(hashCons, info = {}) {
+  const hashC = (msg, opts) => hashCons(opts).update(msg).digest();
+  const tmp = hashCons(void 0);
+  hashC.outputLen = tmp.outputLen;
+  hashC.blockLen = tmp.blockLen;
+  hashC.canXOF = tmp.canXOF;
+  hashC.create = (opts) => hashCons(opts);
+  Object.assign(hashC, info);
+  return Object.freeze(hashC);
+}
+var oidNist2 = (suffix) => ({
+  // Current NIST hashAlgs suffixes used here fit in one DER subidentifier octet.
+  // Larger suffix values would need base-128 OID encoding and a different length byte.
+  oid: Uint8Array.from([6, 9, 96, 134, 72, 1, 101, 3, 4, 2, suffix])
+});
 var _HMAC = class {
   oHash;
   iHash;
   blockLen;
   outputLen;
+  canXOF = false;
   finished = false;
   destroyed = false;
   constructor(hash, key) {
-    ahash(hash);
-    abytes(key, void 0, "key");
+    ahash2(hash);
+    abytes2(key, void 0, "key");
     this.iHash = hash.create();
     if (typeof this.iHash.update !== "function")
       throw new Error("Expected instance of class which extends utils.Hash");
@@ -92845,20 +92919,21 @@ var _HMAC = class {
     for (let i = 0; i < pad.length; i++)
       pad[i] ^= 54 ^ 92;
     this.oHash.update(pad);
-    clean(pad);
+    clean2(pad);
   }
   update(buf) {
-    aexists(this);
+    aexists2(this);
     this.iHash.update(buf);
     return this;
   }
   digestInto(out) {
-    aexists(this);
-    abytes(out, this.outputLen, "output");
+    aexists2(this);
+    aoutput2(out, this);
     this.finished = true;
-    this.iHash.digestInto(out);
-    this.oHash.update(out);
-    this.oHash.digestInto(out);
+    const buf = out.subarray(0, this.outputLen);
+    this.iHash.digestInto(buf);
+    this.oHash.update(buf);
+    this.oHash.digestInto(buf);
     this.destroy();
   }
   digest() {
@@ -92887,18 +92962,24 @@ var _HMAC = class {
     this.iHash.destroy();
   }
 };
-var hmac = (hash, key, message) => new _HMAC(hash, key).update(message).digest();
-hmac.create = (hash, key) => new _HMAC(hash, key);
-init_utils2();
+var hmac = /* @__PURE__ */ (() => {
+  const hmac_ = ((hash, key, message) => new _HMAC(hash, key).update(message).digest());
+  hmac_.create = (hash, key) => new _HMAC(hash, key);
+  return hmac_;
+})();
 function pbkdf2Init(hash, _password, _salt, _opts) {
-  ahash(hash);
+  ahash2(hash);
   const opts = checkOpts({ dkLen: 32, asyncTick: 10 }, _opts);
   const { c, dkLen, asyncTick } = opts;
-  anumber2(c, "c");
-  anumber2(dkLen, "dkLen");
-  anumber2(asyncTick, "asyncTick");
+  anumber3(c, "c");
+  anumber3(dkLen, "dkLen");
+  anumber3(asyncTick, "asyncTick");
   if (c < 1)
     throw new Error("iterations (c) must be >= 1");
+  if (dkLen < 1)
+    throw new Error('"dkLen" must be >= 1');
+  if (dkLen > (2 ** 32 - 1) * hash.outputLen)
+    throw new Error("derived key too long");
   const password = kdfInputToBytes(_password, "password");
   const salt = kdfInputToBytes(_salt, "salt");
   const DK = new Uint8Array(dkLen);
@@ -92911,14 +92992,14 @@ function pbkdf2Output(PRF, PRFSalt, DK, prfW, u2) {
   PRFSalt.destroy();
   if (prfW)
     prfW.destroy();
-  clean(u2);
+  clean2(u2);
   return DK;
 }
 function pbkdf2(hash, password, salt, opts) {
   const { c, dkLen, DK, PRF, PRFSalt } = pbkdf2Init(hash, password, salt, opts);
   let prfW;
   const arr = new Uint8Array(4);
-  const view = createView(arr);
+  const view = createView2(arr);
   const u2 = new Uint8Array(PRF.outputLen);
   for (let ti = 1, pos = 0; pos < dkLen; ti++, pos += PRF.outputLen) {
     const Ti = DK.subarray(pos, pos + PRF.outputLen);
@@ -92933,6 +93014,360 @@ function pbkdf2(hash, password, salt, opts) {
   }
   return pbkdf2Output(PRF, PRFSalt, DK, prfW, u2);
 }
+var HashMD2 = class {
+  blockLen;
+  outputLen;
+  canXOF = false;
+  padOffset;
+  isLE;
+  // For partial updates less than block size
+  buffer;
+  view;
+  finished = false;
+  length = 0;
+  pos = 0;
+  destroyed = false;
+  constructor(blockLen, outputLen, padOffset, isLE2) {
+    this.blockLen = blockLen;
+    this.outputLen = outputLen;
+    this.padOffset = padOffset;
+    this.isLE = isLE2;
+    this.buffer = new Uint8Array(blockLen);
+    this.view = createView2(this.buffer);
+  }
+  update(data) {
+    aexists2(this);
+    abytes2(data);
+    const { view, buffer, blockLen } = this;
+    const len = data.length;
+    for (let pos = 0; pos < len; ) {
+      const take = Math.min(blockLen - this.pos, len - pos);
+      if (take === blockLen) {
+        const dataView = createView2(data);
+        for (; blockLen <= len - pos; pos += blockLen)
+          this.process(dataView, pos);
+        continue;
+      }
+      buffer.set(data.subarray(pos, pos + take), this.pos);
+      this.pos += take;
+      pos += take;
+      if (this.pos === blockLen) {
+        this.process(view, 0);
+        this.pos = 0;
+      }
+    }
+    this.length += data.length;
+    this.roundClean();
+    return this;
+  }
+  digestInto(out) {
+    aexists2(this);
+    aoutput2(out, this);
+    this.finished = true;
+    const { buffer, view, blockLen, isLE: isLE2 } = this;
+    let { pos } = this;
+    buffer[pos++] = 128;
+    clean2(this.buffer.subarray(pos));
+    if (this.padOffset > blockLen - pos) {
+      this.process(view, 0);
+      pos = 0;
+    }
+    for (let i = pos; i < blockLen; i++)
+      buffer[i] = 0;
+    view.setBigUint64(blockLen - 8, BigInt(this.length * 8), isLE2);
+    this.process(view, 0);
+    const oview = createView2(out);
+    const len = this.outputLen;
+    if (len % 4)
+      throw new Error("_sha2: outputLen must be aligned to 32bit");
+    const outLen = len / 4;
+    const state = this.get();
+    if (outLen > state.length)
+      throw new Error("_sha2: outputLen bigger than state");
+    for (let i = 0; i < outLen; i++)
+      oview.setUint32(4 * i, state[i], isLE2);
+  }
+  digest() {
+    const { buffer, outputLen } = this;
+    this.digestInto(buffer);
+    const res = buffer.slice(0, outputLen);
+    this.destroy();
+    return res;
+  }
+  _cloneInto(to) {
+    to ||= new this.constructor();
+    to.set(...this.get());
+    const { blockLen, buffer, length, finished, destroyed, pos } = this;
+    to.destroyed = destroyed;
+    to.finished = finished;
+    to.length = length;
+    to.pos = pos;
+    if (length % blockLen)
+      to.buffer.set(buffer);
+    return to;
+  }
+  clone() {
+    return this._cloneInto();
+  }
+};
+var SHA512_IV2 = /* @__PURE__ */ Uint32Array.from([
+  1779033703,
+  4089235720,
+  3144134277,
+  2227873595,
+  1013904242,
+  4271175723,
+  2773480762,
+  1595750129,
+  1359893119,
+  2917565137,
+  2600822924,
+  725511199,
+  528734635,
+  4215389547,
+  1541459225,
+  327033209
+]);
+var U32_MASK642 = /* @__PURE__ */ BigInt(2 ** 32 - 1);
+var _32n2 = /* @__PURE__ */ BigInt(32);
+function fromBig2(n, le = false) {
+  if (le)
+    return { h: Number(n & U32_MASK642), l: Number(n >> _32n2 & U32_MASK642) };
+  return { h: Number(n >> _32n2 & U32_MASK642) | 0, l: Number(n & U32_MASK642) | 0 };
+}
+function split2(lst, le = false) {
+  const len = lst.length;
+  let Ah = new Uint32Array(len);
+  let Al = new Uint32Array(len);
+  for (let i = 0; i < len; i++) {
+    const { h, l: l2 } = fromBig2(lst[i], le);
+    [Ah[i], Al[i]] = [h, l2];
+  }
+  return [Ah, Al];
+}
+var shrSH2 = (h, _l, s) => h >>> s;
+var shrSL2 = (h, l2, s) => h << 32 - s | l2 >>> s;
+var rotrSH2 = (h, l2, s) => h >>> s | l2 << 32 - s;
+var rotrSL2 = (h, l2, s) => h << 32 - s | l2 >>> s;
+var rotrBH2 = (h, l2, s) => h << 64 - s | l2 >>> s - 32;
+var rotrBL2 = (h, l2, s) => h >>> s - 32 | l2 << 64 - s;
+function add3(Ah, Al, Bh, Bl) {
+  const l2 = (Al >>> 0) + (Bl >>> 0);
+  return { h: Ah + Bh + (l2 / 2 ** 32 | 0) | 0, l: l2 | 0 };
+}
+var add3L2 = (Al, Bl, Cl) => (Al >>> 0) + (Bl >>> 0) + (Cl >>> 0);
+var add3H2 = (low, Ah, Bh, Ch) => Ah + Bh + Ch + (low / 2 ** 32 | 0) | 0;
+var add4L2 = (Al, Bl, Cl, Dl) => (Al >>> 0) + (Bl >>> 0) + (Cl >>> 0) + (Dl >>> 0);
+var add4H2 = (low, Ah, Bh, Ch, Dh) => Ah + Bh + Ch + Dh + (low / 2 ** 32 | 0) | 0;
+var add5L2 = (Al, Bl, Cl, Dl, El) => (Al >>> 0) + (Bl >>> 0) + (Cl >>> 0) + (Dl >>> 0) + (El >>> 0);
+var add5H2 = (low, Ah, Bh, Ch, Dh, Eh) => Ah + Bh + Ch + Dh + Eh + (low / 2 ** 32 | 0) | 0;
+var K5122 = /* @__PURE__ */ (() => split2([
+  "0x428a2f98d728ae22",
+  "0x7137449123ef65cd",
+  "0xb5c0fbcfec4d3b2f",
+  "0xe9b5dba58189dbbc",
+  "0x3956c25bf348b538",
+  "0x59f111f1b605d019",
+  "0x923f82a4af194f9b",
+  "0xab1c5ed5da6d8118",
+  "0xd807aa98a3030242",
+  "0x12835b0145706fbe",
+  "0x243185be4ee4b28c",
+  "0x550c7dc3d5ffb4e2",
+  "0x72be5d74f27b896f",
+  "0x80deb1fe3b1696b1",
+  "0x9bdc06a725c71235",
+  "0xc19bf174cf692694",
+  "0xe49b69c19ef14ad2",
+  "0xefbe4786384f25e3",
+  "0x0fc19dc68b8cd5b5",
+  "0x240ca1cc77ac9c65",
+  "0x2de92c6f592b0275",
+  "0x4a7484aa6ea6e483",
+  "0x5cb0a9dcbd41fbd4",
+  "0x76f988da831153b5",
+  "0x983e5152ee66dfab",
+  "0xa831c66d2db43210",
+  "0xb00327c898fb213f",
+  "0xbf597fc7beef0ee4",
+  "0xc6e00bf33da88fc2",
+  "0xd5a79147930aa725",
+  "0x06ca6351e003826f",
+  "0x142929670a0e6e70",
+  "0x27b70a8546d22ffc",
+  "0x2e1b21385c26c926",
+  "0x4d2c6dfc5ac42aed",
+  "0x53380d139d95b3df",
+  "0x650a73548baf63de",
+  "0x766a0abb3c77b2a8",
+  "0x81c2c92e47edaee6",
+  "0x92722c851482353b",
+  "0xa2bfe8a14cf10364",
+  "0xa81a664bbc423001",
+  "0xc24b8b70d0f89791",
+  "0xc76c51a30654be30",
+  "0xd192e819d6ef5218",
+  "0xd69906245565a910",
+  "0xf40e35855771202a",
+  "0x106aa07032bbd1b8",
+  "0x19a4c116b8d2d0c8",
+  "0x1e376c085141ab53",
+  "0x2748774cdf8eeb99",
+  "0x34b0bcb5e19b48a8",
+  "0x391c0cb3c5c95a63",
+  "0x4ed8aa4ae3418acb",
+  "0x5b9cca4f7763e373",
+  "0x682e6ff3d6b2b8a3",
+  "0x748f82ee5defb2fc",
+  "0x78a5636f43172f60",
+  "0x84c87814a1f0ab72",
+  "0x8cc702081a6439ec",
+  "0x90befffa23631e28",
+  "0xa4506cebde82bde9",
+  "0xbef9a3f7b2c67915",
+  "0xc67178f2e372532b",
+  "0xca273eceea26619c",
+  "0xd186b8c721c0c207",
+  "0xeada7dd6cde0eb1e",
+  "0xf57d4f7fee6ed178",
+  "0x06f067aa72176fba",
+  "0x0a637dc5a2c898a6",
+  "0x113f9804bef90dae",
+  "0x1b710b35131c471b",
+  "0x28db77f523047d84",
+  "0x32caab7b40c72493",
+  "0x3c9ebe0a15c9bebc",
+  "0x431d67c49c100d4c",
+  "0x4cc5d4becb3e42b6",
+  "0x597f299cfc657e2a",
+  "0x5fcb6fab3ad6faec",
+  "0x6c44198c4a475817"
+].map((n) => BigInt(n))))();
+var SHA512_Kh2 = /* @__PURE__ */ (() => K5122[0])();
+var SHA512_Kl2 = /* @__PURE__ */ (() => K5122[1])();
+var SHA512_W_H2 = /* @__PURE__ */ new Uint32Array(80);
+var SHA512_W_L2 = /* @__PURE__ */ new Uint32Array(80);
+var SHA2_64B2 = class extends HashMD2 {
+  constructor(outputLen) {
+    super(128, outputLen, 16, false);
+  }
+  // prettier-ignore
+  get() {
+    const { Ah, Al, Bh, Bl, Ch, Cl, Dh, Dl, Eh, El, Fh, Fl, Gh, Gl, Hh, Hl } = this;
+    return [Ah, Al, Bh, Bl, Ch, Cl, Dh, Dl, Eh, El, Fh, Fl, Gh, Gl, Hh, Hl];
+  }
+  // prettier-ignore
+  set(Ah, Al, Bh, Bl, Ch, Cl, Dh, Dl, Eh, El, Fh, Fl, Gh, Gl, Hh, Hl) {
+    this.Ah = Ah | 0;
+    this.Al = Al | 0;
+    this.Bh = Bh | 0;
+    this.Bl = Bl | 0;
+    this.Ch = Ch | 0;
+    this.Cl = Cl | 0;
+    this.Dh = Dh | 0;
+    this.Dl = Dl | 0;
+    this.Eh = Eh | 0;
+    this.El = El | 0;
+    this.Fh = Fh | 0;
+    this.Fl = Fl | 0;
+    this.Gh = Gh | 0;
+    this.Gl = Gl | 0;
+    this.Hh = Hh | 0;
+    this.Hl = Hl | 0;
+  }
+  process(view, offset) {
+    for (let i = 0; i < 16; i++, offset += 4) {
+      SHA512_W_H2[i] = view.getUint32(offset);
+      SHA512_W_L2[i] = view.getUint32(offset += 4);
+    }
+    for (let i = 16; i < 80; i++) {
+      const W15h = SHA512_W_H2[i - 15] | 0;
+      const W15l = SHA512_W_L2[i - 15] | 0;
+      const s0h = rotrSH2(W15h, W15l, 1) ^ rotrSH2(W15h, W15l, 8) ^ shrSH2(W15h, W15l, 7);
+      const s0l = rotrSL2(W15h, W15l, 1) ^ rotrSL2(W15h, W15l, 8) ^ shrSL2(W15h, W15l, 7);
+      const W2h = SHA512_W_H2[i - 2] | 0;
+      const W2l = SHA512_W_L2[i - 2] | 0;
+      const s1h = rotrSH2(W2h, W2l, 19) ^ rotrBH2(W2h, W2l, 61) ^ shrSH2(W2h, W2l, 6);
+      const s1l = rotrSL2(W2h, W2l, 19) ^ rotrBL2(W2h, W2l, 61) ^ shrSL2(W2h, W2l, 6);
+      const SUMl = add4L2(s0l, s1l, SHA512_W_L2[i - 7], SHA512_W_L2[i - 16]);
+      const SUMh = add4H2(SUMl, s0h, s1h, SHA512_W_H2[i - 7], SHA512_W_H2[i - 16]);
+      SHA512_W_H2[i] = SUMh | 0;
+      SHA512_W_L2[i] = SUMl | 0;
+    }
+    let { Ah, Al, Bh, Bl, Ch, Cl, Dh, Dl, Eh, El, Fh, Fl, Gh, Gl, Hh, Hl } = this;
+    for (let i = 0; i < 80; i++) {
+      const sigma1h = rotrSH2(Eh, El, 14) ^ rotrSH2(Eh, El, 18) ^ rotrBH2(Eh, El, 41);
+      const sigma1l = rotrSL2(Eh, El, 14) ^ rotrSL2(Eh, El, 18) ^ rotrBL2(Eh, El, 41);
+      const CHIh = Eh & Fh ^ ~Eh & Gh;
+      const CHIl = El & Fl ^ ~El & Gl;
+      const T1ll = add5L2(Hl, sigma1l, CHIl, SHA512_Kl2[i], SHA512_W_L2[i]);
+      const T1h = add5H2(T1ll, Hh, sigma1h, CHIh, SHA512_Kh2[i], SHA512_W_H2[i]);
+      const T1l = T1ll | 0;
+      const sigma0h = rotrSH2(Ah, Al, 28) ^ rotrBH2(Ah, Al, 34) ^ rotrBH2(Ah, Al, 39);
+      const sigma0l = rotrSL2(Ah, Al, 28) ^ rotrBL2(Ah, Al, 34) ^ rotrBL2(Ah, Al, 39);
+      const MAJh = Ah & Bh ^ Ah & Ch ^ Bh & Ch;
+      const MAJl = Al & Bl ^ Al & Cl ^ Bl & Cl;
+      Hh = Gh | 0;
+      Hl = Gl | 0;
+      Gh = Fh | 0;
+      Gl = Fl | 0;
+      Fh = Eh | 0;
+      Fl = El | 0;
+      ({ h: Eh, l: El } = add3(Dh | 0, Dl | 0, T1h | 0, T1l | 0));
+      Dh = Ch | 0;
+      Dl = Cl | 0;
+      Ch = Bh | 0;
+      Cl = Bl | 0;
+      Bh = Ah | 0;
+      Bl = Al | 0;
+      const All = add3L2(T1l, sigma0l, MAJl);
+      Ah = add3H2(All, T1h, sigma0h, MAJh);
+      Al = All | 0;
+    }
+    ({ h: Ah, l: Al } = add3(this.Ah | 0, this.Al | 0, Ah | 0, Al | 0));
+    ({ h: Bh, l: Bl } = add3(this.Bh | 0, this.Bl | 0, Bh | 0, Bl | 0));
+    ({ h: Ch, l: Cl } = add3(this.Ch | 0, this.Cl | 0, Ch | 0, Cl | 0));
+    ({ h: Dh, l: Dl } = add3(this.Dh | 0, this.Dl | 0, Dh | 0, Dl | 0));
+    ({ h: Eh, l: El } = add3(this.Eh | 0, this.El | 0, Eh | 0, El | 0));
+    ({ h: Fh, l: Fl } = add3(this.Fh | 0, this.Fl | 0, Fh | 0, Fl | 0));
+    ({ h: Gh, l: Gl } = add3(this.Gh | 0, this.Gl | 0, Gh | 0, Gl | 0));
+    ({ h: Hh, l: Hl } = add3(this.Hh | 0, this.Hl | 0, Hh | 0, Hl | 0));
+    this.set(Ah, Al, Bh, Bl, Ch, Cl, Dh, Dl, Eh, El, Fh, Fl, Gh, Gl, Hh, Hl);
+  }
+  roundClean() {
+    clean2(SHA512_W_H2, SHA512_W_L2);
+  }
+  destroy() {
+    this.destroyed = true;
+    clean2(this.buffer);
+    this.set(0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0);
+  }
+};
+var _SHA5122 = class extends SHA2_64B2 {
+  Ah = SHA512_IV2[0] | 0;
+  Al = SHA512_IV2[1] | 0;
+  Bh = SHA512_IV2[2] | 0;
+  Bl = SHA512_IV2[3] | 0;
+  Ch = SHA512_IV2[4] | 0;
+  Cl = SHA512_IV2[5] | 0;
+  Dh = SHA512_IV2[6] | 0;
+  Dl = SHA512_IV2[7] | 0;
+  Eh = SHA512_IV2[8] | 0;
+  El = SHA512_IV2[9] | 0;
+  Fh = SHA512_IV2[10] | 0;
+  Fl = SHA512_IV2[11] | 0;
+  Gh = SHA512_IV2[12] | 0;
+  Gl = SHA512_IV2[13] | 0;
+  Hh = SHA512_IV2[14] | 0;
+  Hl = SHA512_IV2[15] | 0;
+  constructor() {
+    super(64);
+  }
+};
+var sha5122 = /* @__PURE__ */ createHasher2(
+  () => new _SHA5122(),
+  /* @__PURE__ */ oidNist2(3)
+);
 function nfkd(str) {
   if (typeof str !== "string")
     throw new TypeError("invalid mnemonic type: " + typeof str);
@@ -92947,7 +93382,10 @@ function normalize(str) {
 }
 var psalt = (passphrase) => nfkd("mnemonic" + passphrase);
 function mnemonicToSeedSync(mnemonic, passphrase = "") {
-  return pbkdf2(sha512, normalize(mnemonic).nfkd, psalt(passphrase), { c: 2048, dkLen: 64 });
+  return pbkdf2(sha5122, normalize(mnemonic).nfkd, psalt(passphrase), {
+    c: 2048,
+    dkLen: 64
+  });
 }
 function isValidHardenedPath(path) {
   if (!(/* @__PURE__ */ new RegExp("^m\\/44'\\/784'\\/[0-9]+'\\/[0-9]+'\\/[0-9]+'+$")).test(path)) return false;
@@ -92962,6 +93400,76 @@ function mnemonicToSeedHex(mnemonics) {
 init_intent();
 init_signature_scheme2();
 init_signature_scheme2();
+init_utils2();
+var _HMAC2 = class {
+  oHash;
+  iHash;
+  blockLen;
+  outputLen;
+  finished = false;
+  destroyed = false;
+  constructor(hash, key) {
+    ahash(hash);
+    abytes(key, void 0, "key");
+    this.iHash = hash.create();
+    if (typeof this.iHash.update !== "function")
+      throw new Error("Expected instance of class which extends utils.Hash");
+    this.blockLen = this.iHash.blockLen;
+    this.outputLen = this.iHash.outputLen;
+    const blockLen = this.blockLen;
+    const pad = new Uint8Array(blockLen);
+    pad.set(key.length > blockLen ? hash.create().update(key).digest() : key);
+    for (let i = 0; i < pad.length; i++)
+      pad[i] ^= 54;
+    this.iHash.update(pad);
+    this.oHash = hash.create();
+    for (let i = 0; i < pad.length; i++)
+      pad[i] ^= 54 ^ 92;
+    this.oHash.update(pad);
+    clean(pad);
+  }
+  update(buf) {
+    aexists(this);
+    this.iHash.update(buf);
+    return this;
+  }
+  digestInto(out) {
+    aexists(this);
+    abytes(out, this.outputLen, "output");
+    this.finished = true;
+    this.iHash.digestInto(out);
+    this.oHash.update(out);
+    this.oHash.digestInto(out);
+    this.destroy();
+  }
+  digest() {
+    const out = new Uint8Array(this.oHash.outputLen);
+    this.digestInto(out);
+    return out;
+  }
+  _cloneInto(to) {
+    to ||= Object.create(Object.getPrototypeOf(this), {});
+    const { oHash, iHash, finished, destroyed, blockLen, outputLen } = this;
+    to = to;
+    to.finished = finished;
+    to.destroyed = destroyed;
+    to.blockLen = blockLen;
+    to.outputLen = outputLen;
+    to.oHash = oHash._cloneInto(to.oHash);
+    to.iHash = iHash._cloneInto(to.iHash);
+    return to;
+  }
+  clone() {
+    return this._cloneInto();
+  }
+  destroy() {
+    this.destroyed = true;
+    this.oHash.destroy();
+    this.iHash.destroy();
+  }
+};
+var hmac2 = (hash, key, message) => new _HMAC2(hash, key).update(message).digest();
+hmac2.create = (hash, key) => new _HMAC2(hash, key);
 init_dist2();
 function toSerializedSignature({ signature, signatureScheme, publicKey }) {
   if (!publicKey) throw new Error("`publicKey` is required");
@@ -93052,7 +93560,7 @@ var HARDENED_OFFSET = 2147483648;
 var pathRegex = /* @__PURE__ */ new RegExp("^m(\\/[0-9]+')+$");
 var replaceDerive = (val) => val.replace("'", "");
 var getMasterKeyFromSeed = (seed) => {
-  const I2 = hmac.create(sha512, new TextEncoder().encode(ED25519_CURVE)).update(fromHex(seed)).digest();
+  const I2 = hmac2.create(sha512, new TextEncoder().encode(ED25519_CURVE)).update(fromHex(seed)).digest();
   return {
     key: I2.slice(0, 32),
     chainCode: I2.slice(32)
@@ -93065,7 +93573,7 @@ var CKDPriv = ({ key, chainCode }, index) => {
   data.set(new Uint8Array(1).fill(0));
   data.set(key, 1);
   data.set(new Uint8Array(indexBuffer, 0, indexBuffer.byteLength), key.length + 1);
-  const I2 = hmac.create(sha512, chainCode).update(data).digest();
+  const I2 = hmac2.create(sha512, chainCode).update(data).digest();
   return {
     key: I2.slice(0, 32),
     chainCode: I2.slice(32)
@@ -93199,47 +93707,47 @@ var Ed25519Keypair = class Ed25519Keypair2 extends Keypair {
   }
 };
 var crypto3 = nc && typeof nc === "object" && "webcrypto" in nc ? nc.webcrypto : nc && typeof nc === "object" && "randomBytes" in nc ? nc : void 0;
-function isBytes3(a) {
+function isBytes4(a) {
   return a instanceof Uint8Array || ArrayBuffer.isView(a) && a.constructor.name === "Uint8Array";
 }
-function anumber3(n) {
+function anumber4(n) {
   if (!Number.isSafeInteger(n) || n < 0)
     throw new Error("positive integer expected, got " + n);
 }
-function abytes2(b, ...lengths) {
-  if (!isBytes3(b))
+function abytes3(b, ...lengths) {
+  if (!isBytes4(b))
     throw new Error("Uint8Array expected");
   if (lengths.length > 0 && !lengths.includes(b.length))
     throw new Error("Uint8Array expected of length " + lengths + ", got length=" + b.length);
 }
-function ahash2(h) {
+function ahash3(h) {
   if (typeof h !== "function" || typeof h.create !== "function")
     throw new Error("Hash should be wrapped by utils.createHasher");
-  anumber3(h.outputLen);
-  anumber3(h.blockLen);
+  anumber4(h.outputLen);
+  anumber4(h.blockLen);
 }
-function aexists2(instance, checkFinished = true) {
+function aexists3(instance, checkFinished = true) {
   if (instance.destroyed)
     throw new Error("Hash instance has been destroyed");
   if (checkFinished && instance.finished)
     throw new Error("Hash#digest() has already been called");
 }
-function aoutput2(out, instance) {
-  abytes2(out);
+function aoutput3(out, instance) {
+  abytes3(out);
   const min2 = instance.outputLen;
   if (out.length < min2) {
     throw new Error("digestInto() expects output buffer of length at least " + min2);
   }
 }
-function clean2(...arrays) {
+function clean3(...arrays) {
   for (let i = 0; i < arrays.length; i++) {
     arrays[i].fill(0);
   }
 }
-function createView2(arr) {
+function createView3(arr) {
   return new DataView(arr.buffer, arr.byteOffset, arr.byteLength);
 }
-function rotr2(word, shift) {
+function rotr3(word, shift) {
   return word << 32 - shift | word >>> shift;
 }
 var hasHexBuiltin2 = /* @__PURE__ */ (() => (
@@ -93248,7 +93756,7 @@ var hasHexBuiltin2 = /* @__PURE__ */ (() => (
 ))();
 var hexes2 = /* @__PURE__ */ Array.from({ length: 256 }, (_, i) => i.toString(16).padStart(2, "0"));
 function bytesToHex2(bytes) {
-  abytes2(bytes);
+  abytes3(bytes);
   if (hasHexBuiltin2)
     return bytes.toHex();
   let hex = "";
@@ -93296,14 +93804,14 @@ function utf8ToBytes2(str) {
 function toBytes(data) {
   if (typeof data === "string")
     data = utf8ToBytes2(data);
-  abytes2(data);
+  abytes3(data);
   return data;
 }
 function concatBytes3(...arrays) {
   let sum2 = 0;
   for (let i = 0; i < arrays.length; i++) {
     const a = arrays[i];
-    abytes2(a);
+    abytes3(a);
     sum2 += a.length;
   }
   const res = new Uint8Array(sum2);
@@ -93316,7 +93824,7 @@ function concatBytes3(...arrays) {
 }
 var Hash = class {
 };
-function createHasher2(hashCons) {
+function createHasher3(hashCons) {
   const hashC = (msg) => hashCons().update(toBytes(msg)).digest();
   const tmp = hashCons();
   hashC.outputLen = tmp.outputLen;
@@ -93336,22 +93844,22 @@ function randomBytes2(bytesLength = 32) {
 function setBigUint64(view, byteOffset, value, isLE2) {
   if (typeof view.setBigUint64 === "function")
     return view.setBigUint64(byteOffset, value, isLE2);
-  const _32n2 = BigInt(32);
+  const _32n3 = BigInt(32);
   const _u32_max = BigInt(4294967295);
-  const wh = Number(value >> _32n2 & _u32_max);
+  const wh = Number(value >> _32n3 & _u32_max);
   const wl = Number(value & _u32_max);
   const h = isLE2 ? 4 : 0;
   const l2 = isLE2 ? 0 : 4;
   view.setUint32(byteOffset + h, wh, isLE2);
   view.setUint32(byteOffset + l2, wl, isLE2);
 }
-function Chi2(a, b, c) {
+function Chi3(a, b, c) {
   return a & b ^ ~a & c;
 }
-function Maj2(a, b, c) {
+function Maj3(a, b, c) {
   return a & b ^ a & c ^ b & c;
 }
-var HashMD2 = class extends Hash {
+var HashMD3 = class extends Hash {
   constructor(blockLen, outputLen, padOffset, isLE2) {
     super();
     this.finished = false;
@@ -93363,18 +93871,18 @@ var HashMD2 = class extends Hash {
     this.padOffset = padOffset;
     this.isLE = isLE2;
     this.buffer = new Uint8Array(blockLen);
-    this.view = createView2(this.buffer);
+    this.view = createView3(this.buffer);
   }
   update(data) {
-    aexists2(this);
+    aexists3(this);
     data = toBytes(data);
-    abytes2(data);
+    abytes3(data);
     const { view, buffer, blockLen } = this;
     const len = data.length;
     for (let pos = 0; pos < len; ) {
       const take = Math.min(blockLen - this.pos, len - pos);
       if (take === blockLen) {
-        const dataView = createView2(data);
+        const dataView = createView3(data);
         for (; blockLen <= len - pos; pos += blockLen)
           this.process(dataView, pos);
         continue;
@@ -93392,13 +93900,13 @@ var HashMD2 = class extends Hash {
     return this;
   }
   digestInto(out) {
-    aexists2(this);
-    aoutput2(out, this);
+    aexists3(this);
+    aoutput3(out, this);
     this.finished = true;
     const { buffer, view, blockLen, isLE: isLE2 } = this;
     let { pos } = this;
     buffer[pos++] = 128;
-    clean2(this.buffer.subarray(pos));
+    clean3(this.buffer.subarray(pos));
     if (this.padOffset > blockLen - pos) {
       this.process(view, 0);
       pos = 0;
@@ -93407,7 +93915,7 @@ var HashMD2 = class extends Hash {
       buffer[i] = 0;
     setBigUint64(view, blockLen - 8, BigInt(this.length * 8), isLE2);
     this.process(view, 0);
-    const oview = createView2(out);
+    const oview = createView3(out);
     const len = this.outputLen;
     if (len % 4)
       throw new Error("_sha2: outputLen should be aligned to 32bit");
@@ -93441,7 +93949,7 @@ var HashMD2 = class extends Hash {
     return this._cloneInto();
   }
 };
-var SHA256_IV2 = /* @__PURE__ */ Uint32Array.from([
+var SHA256_IV3 = /* @__PURE__ */ Uint32Array.from([
   1779033703,
   3144134277,
   1013904242,
@@ -93518,17 +94026,17 @@ var SHA256_K = /* @__PURE__ */ Uint32Array.from([
   3329325298
 ]);
 var SHA256_W = /* @__PURE__ */ new Uint32Array(64);
-var SHA256 = class extends HashMD2 {
+var SHA256 = class extends HashMD3 {
   constructor(outputLen = 32) {
     super(64, outputLen, 8, false);
-    this.A = SHA256_IV2[0] | 0;
-    this.B = SHA256_IV2[1] | 0;
-    this.C = SHA256_IV2[2] | 0;
-    this.D = SHA256_IV2[3] | 0;
-    this.E = SHA256_IV2[4] | 0;
-    this.F = SHA256_IV2[5] | 0;
-    this.G = SHA256_IV2[6] | 0;
-    this.H = SHA256_IV2[7] | 0;
+    this.A = SHA256_IV3[0] | 0;
+    this.B = SHA256_IV3[1] | 0;
+    this.C = SHA256_IV3[2] | 0;
+    this.D = SHA256_IV3[3] | 0;
+    this.E = SHA256_IV3[4] | 0;
+    this.F = SHA256_IV3[5] | 0;
+    this.G = SHA256_IV3[6] | 0;
+    this.H = SHA256_IV3[7] | 0;
   }
   get() {
     const { A, B: B2, C: C2, D: D2, E, F: F2, G: G2, H: H2 } = this;
@@ -93551,16 +94059,16 @@ var SHA256 = class extends HashMD2 {
     for (let i = 16; i < 64; i++) {
       const W15 = SHA256_W[i - 15];
       const W2 = SHA256_W[i - 2];
-      const s0 = rotr2(W15, 7) ^ rotr2(W15, 18) ^ W15 >>> 3;
-      const s1 = rotr2(W2, 17) ^ rotr2(W2, 19) ^ W2 >>> 10;
+      const s0 = rotr3(W15, 7) ^ rotr3(W15, 18) ^ W15 >>> 3;
+      const s1 = rotr3(W2, 17) ^ rotr3(W2, 19) ^ W2 >>> 10;
       SHA256_W[i] = s1 + SHA256_W[i - 7] + s0 + SHA256_W[i - 16] | 0;
     }
     let { A, B: B2, C: C2, D: D2, E, F: F2, G: G2, H: H2 } = this;
     for (let i = 0; i < 64; i++) {
-      const sigma1 = rotr2(E, 6) ^ rotr2(E, 11) ^ rotr2(E, 25);
-      const T1 = H2 + sigma1 + Chi2(E, F2, G2) + SHA256_K[i] + SHA256_W[i] | 0;
-      const sigma0 = rotr2(A, 2) ^ rotr2(A, 13) ^ rotr2(A, 22);
-      const T2 = sigma0 + Maj2(A, B2, C2) | 0;
+      const sigma1 = rotr3(E, 6) ^ rotr3(E, 11) ^ rotr3(E, 25);
+      const T1 = H2 + sigma1 + Chi3(E, F2, G2) + SHA256_K[i] + SHA256_W[i] | 0;
+      const sigma0 = rotr3(A, 2) ^ rotr3(A, 13) ^ rotr3(A, 22);
+      const T2 = sigma0 + Maj3(A, B2, C2) | 0;
       H2 = G2;
       G2 = F2;
       F2 = E;
@@ -93581,20 +94089,20 @@ var SHA256 = class extends HashMD2 {
     this.set(A, B2, C2, D2, E, F2, G2, H2);
   }
   roundClean() {
-    clean2(SHA256_W);
+    clean3(SHA256_W);
   }
   destroy() {
     this.set(0, 0, 0, 0, 0, 0, 0, 0);
-    clean2(this.buffer);
+    clean3(this.buffer);
   }
 };
-var sha2562 = /* @__PURE__ */ createHasher2(() => new SHA256());
+var sha2562 = /* @__PURE__ */ createHasher3(() => new SHA256());
 var HMAC = class extends Hash {
   constructor(hash, _key) {
     super();
     this.finished = false;
     this.destroyed = false;
-    ahash2(hash);
+    ahash3(hash);
     const key = toBytes(_key);
     this.iHash = hash.create();
     if (typeof this.iHash.update !== "function")
@@ -93611,16 +94119,16 @@ var HMAC = class extends Hash {
     for (let i = 0; i < pad.length; i++)
       pad[i] ^= 54 ^ 92;
     this.oHash.update(pad);
-    clean2(pad);
+    clean3(pad);
   }
   update(buf) {
-    aexists2(this);
+    aexists3(this);
     this.iHash.update(buf);
     return this;
   }
   digestInto(out) {
-    aexists2(this);
-    abytes2(out, this.outputLen);
+    aexists3(this);
+    abytes3(out, this.outputLen);
     this.finished = true;
     this.iHash.digestInto(out);
     this.oHash.update(out);
@@ -93653,8 +94161,8 @@ var HMAC = class extends Hash {
     this.iHash.destroy();
   }
 };
-var hmac2 = (hash, key, message) => new HMAC(hash, key).update(message).digest();
-hmac2.create = (hash, key) => new HMAC(hash, key);
+var hmac3 = (hash, key, message) => new HMAC(hash, key).update(message).digest();
+hmac3.create = (hash, key) => new HMAC(hash, key);
 var _0n5 = /* @__PURE__ */ BigInt(0);
 var _1n6 = /* @__PURE__ */ BigInt(1);
 function _abool2(value, title = "") {
@@ -93665,7 +94173,7 @@ function _abool2(value, title = "") {
   return value;
 }
 function _abytes2(value, length, title = "") {
-  const bytes = isBytes3(value);
+  const bytes = isBytes4(value);
   const len = value?.length;
   const needsLen = length !== void 0;
   if (!bytes || needsLen && len !== length) {
@@ -93689,7 +94197,7 @@ function bytesToNumberBE2(bytes) {
   return hexToNumber2(bytesToHex2(bytes));
 }
 function bytesToNumberLE2(bytes) {
-  abytes2(bytes);
+  abytes3(bytes);
   return hexToNumber2(bytesToHex2(Uint8Array.from(bytes).reverse()));
 }
 function numberToBytesBE2(n, len) {
@@ -93706,7 +94214,7 @@ function ensureBytes(title, hex, expectedLength) {
     } catch (e) {
       throw new Error(title + " must be hex string or Uint8Array, cause: " + e);
     }
-  } else if (isBytes3(hex)) {
+  } else if (isBytes4(hex)) {
     res = Uint8Array.from(hex);
   } else {
     throw new Error(title + " must be hex string or Uint8Array");
@@ -94024,7 +94532,7 @@ function FpLegendre2(Fp, n) {
 }
 function nLength2(n, nBitLength) {
   if (nBitLength !== void 0)
-    anumber3(nBitLength);
+    anumber4(nBitLength);
   const _nBitLength = nBitLength !== void 0 ? nBitLength : n.toString(2).length;
   const nByteLength = Math.ceil(_nBitLength / 8);
   return { nBitLength: _nBitLength, nByteLength };
@@ -95111,7 +95619,7 @@ function ecdh(Point, ecdhOpts = {}) {
   return Object.freeze({ getPublicKey, getSharedSecret, keygen, Point, utils, lengths });
 }
 function ecdsa(Point, hash, ecdsaOpts = {}) {
-  ahash2(hash);
+  ahash3(hash);
   _validateObject(ecdsaOpts, {}, {
     hmac: "function",
     lowS: "boolean",
@@ -95120,7 +95628,7 @@ function ecdsa(Point, hash, ecdsaOpts = {}) {
     bits2int_modN: "function"
   });
   const randomBytes3 = ecdsaOpts.randomBytes || randomBytes2;
-  const hmac3 = ecdsaOpts.hmac || ((key, ...msgs) => hmac2(hash, key, concatBytes3(...msgs)));
+  const hmac4 = ecdsaOpts.hmac || ((key, ...msgs) => hmac3(hash, key, concatBytes3(...msgs)));
   const { Fp, Fn } = Point;
   const { ORDER: CURVE_ORDER, BITS: fnBits } = Fn;
   const { keygen, getPublicKey, getSharedSecret, utils, lengths } = ecdh(Point, ecdsaOpts);
@@ -95304,13 +95812,13 @@ function ecdsa(Point, hash, ecdsaOpts = {}) {
   function sign2(message, secretKey, opts = {}) {
     message = ensureBytes("message", message);
     const { seed, k2sig } = prepSig(message, secretKey, opts);
-    const drbg = createHmacDrbg(hash.outputLen, Fn.BYTES, hmac3);
+    const drbg = createHmacDrbg(hash.outputLen, Fn.BYTES, hmac4);
     const sig = drbg(seed, k2sig);
     return sig;
   }
   function tryParsingSig(sg) {
     let sig = void 0;
-    const isHex3 = typeof sg === "string" || isBytes3(sg);
+    const isHex3 = typeof sg === "string" || isBytes4(sg);
     const isObj = !isHex3 && sg !== null && typeof sg === "object" && typeof sg.r === "bigint" && typeof sg.s === "bigint";
     if (!isHex3 && !isObj)
       throw new Error("invalid signature, expected Uint8Array, hex string or Signature instance");
@@ -97166,7 +97674,7 @@ function resolveApiKey(apiKey) {
   if (!key) {
     throw new T2000Error(
       "INVALID_KEY",
-      "No Private API key. Pass `apiKey` or set T2000_API_KEY. Generate one at platform.t2000.ai (Pro/Max)."
+      "No Private API key. Pass `apiKey` or set T2000_API_KEY. Generate one at agents.t2000.ai/manage (Pro/Max)."
     );
   }
   return key;
@@ -98363,6 +98871,42 @@ Call t2000_services first to discover the right endpoint, then t2000_pay to exec
       }
     }
   );
+  server.tool(
+    "t2000_agents",
+    `Browse the t2000 AGENT STORE (agents.t2000.ai) \u2014 third-party and t2000-operated agents selling one-call services (market reads, data feeds, tools) for USDC over x402, with receipt-backed reputation (sold counts + delivered rates derive from on-chain settlements, not reviews). Distinct from t2000_services (the MPP proxy catalog): these are AGENTS with on-chain identity.
+
+No address \u2192 the priced-service list (filter with category/limit). With an address \u2192 the full listing: profile, price, and reputation (sales, buyers, delivered rate, recent settlement txs).
+
+Buy a listing with t2000_agent_pay. Tasks that PAY the agent for using the rail: GET https://mpp.t2000.ai/tasks/stats (see the t2000-hire skill).`,
+    {
+      address: external_exports.string().optional().describe("An agent's Sui address for the full listing (omit to list)"),
+      category: external_exports.string().optional().describe("Filter the list: ai-models | data-feeds | finance | research | dev-tools | creative | other"),
+      limit: external_exports.number().optional().describe("Max listings to return (default 30)")
+    },
+    async ({ address, category, limit }) => {
+      try {
+        if (address) {
+          const res2 = await fetch(`https://api.t2000.ai/v1/agents/${address}`);
+          if (!res2.ok) throw new Error(`Agent lookup failed (${res2.status})`);
+          return { content: [{ type: "text", text: JSON.stringify(await res2.json()) }] };
+        }
+        const res = await fetch("https://api.t2000.ai/v1/agents?limit=100");
+        if (!res.ok) throw new Error(`Store directory failed (${res.status})`);
+        const data = await res.json();
+        let agents = (data.agents ?? []).filter((a) => a.active !== false && a.service && a.priceUsdc);
+        if (category) {
+          const c = category.trim().toLowerCase();
+          agents = agents.filter((a) => a.category?.toLowerCase() === c);
+        }
+        agents = agents.slice(0, Math.min(limit ?? 30, 100));
+        return {
+          content: [{ type: "text", text: JSON.stringify({ total: data.total, shown: agents.length, agents }) }]
+        };
+      } catch (err) {
+        return errorResult(err);
+      }
+    }
+  );
 }
 init_zod();
 var TxMutex = class {
@@ -98526,6 +99070,39 @@ ${text}`;
       }
     }
   );
+  server.tool(
+    "t2000_agent_pay",
+    `Buy a service from the t2000 AGENT STORE (agents.t2000.ai) \u2014 pay a seller agent's declared price in USDC over x402 and get the service response in the same call. Gateway-mediated with escrow semantics: the seller is paid only after delivery succeeds; a failed delivery AUTO-REFUNDS the full amount. Settlement writes an on-chain receipt (builds the seller's public reputation). Mirrors \`t2 agent pay <seller>\`.
+
+Use t2000_agents FIRST to discover listings + prices (judge sellers by their receipt-backed reputation: sold count, delivered rate). Pass the service's input via \`data\` when the listing's description shows an Input hint (e.g. {"symbol":"ETH"}).`,
+    {
+      seller: external_exports.string().describe("The seller agent's Sui address (from t2000_agents)"),
+      data: external_exports.string().optional().describe(`JSON service input, per the listing's "Input:" hint (omit if none)`),
+      maxPrice: external_exports.number().default(1).describe("Max USD to approve (default $1.00; the seller's declared price is what's charged)")
+    },
+    async ({ seller, data, maxPrice }) => {
+      try {
+        const result = await mutex.run(
+          () => agent.pay({
+            url: `https://mpp.t2000.ai/commerce/pay/${seller}`,
+            method: "POST",
+            body: data,
+            maxPrice
+          })
+        );
+        let text = JSON.stringify(result);
+        const MAX_BYTES = 8e5;
+        if (text.length > MAX_BYTES) {
+          text = `${text.slice(0, MAX_BYTES)}
+
+[Response truncated \u2014 exceeded size limit]`;
+        }
+        return { content: [{ type: "text", text }] };
+      } catch (err) {
+        return errorResult(err);
+      }
+    }
+  );
 }
 function readLimits(configDir) {
   const limits = getLimits(configDir);
@@ -98562,7 +99139,7 @@ var DEFAULT_MODEL = "openai/gpt-oss-120b";
 function registerChatTools(server) {
   server.tool(
     "t2000_chat",
-    "Run private inference on the t2000 Private API (OpenAI-compatible; ZDR by default, a `phala/*` tier is GPU-TEE confidential), billed to the user's t2000 credit. Requires T2000_API_KEY in the server env (any funded account can mint one \u2014 platform.t2000.ai or `t2 agent onboard`). Pass a single `prompt`, or a full `messages` list. Discover model ids with t2000_models; defaults to the fast gpt-oss-120b.",
+    "Run private inference on the t2000 Private API (OpenAI-compatible; ZDR by default, a `phala/*` tier is GPU-TEE confidential), billed to the user's t2000 credit. Requires T2000_API_KEY in the server env (any funded account can mint one \u2014 agents.t2000.ai/manage or `t2 agent onboard`). Pass a single `prompt`, or a full `messages` list. Discover model ids with t2000_models; defaults to the fast gpt-oss-120b.",
     {
       prompt: external_exports.string().optional().describe("User prompt (shorthand for a single user message)"),
       messages: external_exports.array(
@@ -98641,7 +99218,7 @@ function registerChatTools(server) {
 var cachedSkills = null;
 function getBakedSkills() {
   if (cachedSkills) return cachedSkills;
-  const raw = '[{"name":"t2000-check-balance","description":"Check the t2000 Agent Wallet balance on Sui. Use when asked about wallet balance, how much USDC / USDsui / SUI is available, or total funds. Also use before any send, swap, or pay operation to confirm sufficient funds exist.","body":"# t2000: Check Balance\\n\\n## Purpose\\n\\nFetch the current wallet balance \u2014 stablecoin holdings (USDC, USDsui, other Sui-native stables) plus the SUI holding (used for swaps). Wallet only; **no savings or debt** rollup (those live on audric.ai, not in the Agent Wallet CLI).\\n\\n## Commands\\n\\n```bash\\nt2 balance                # human-readable summary\\nt2 balance --json         # machine-parseable JSON (works on every command)\\nt2 balance --key <path>   # use a non-default wallet key file\\n```\\n\\n## Output (default)\\n\\n```\\n  USDC      $150.00\\n  USDsui    $20.00\\n  SUI       $0.50    (0.5000 SUI \u2014 gas)\\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\\n  Wallet total  $170.50\\n```\\n\\nThe list shows every stablecoin with a balance \u2265 $0.01, sorted with USDC first. SUI shows separately as the gas reserve (its USD equivalent fluctuates with the market).\\n\\n## Output (--json)\\n\\n```json\\n{\\n  \\"available\\": 170.0,\\n  \\"stables\\": { \\"USDC\\": 150.0, \\"USDsui\\": 20.0 },\\n  \\"sui\\": { \\"amount\\": 0.5, \\"usdValue\\": 0.5 },\\n  \\"totalUsd\\": 170.5\\n}\\n```\\n\\n## Rules\\n\\n1. **Wallet-only.** This skill returns holdings, not savings or debt. If the user asks \\"what are my savings?\\" or \\"what\'s my health factor?\\", redirect them to audric.ai (the consumer surface that wraps Audric Finance).\\n2. **Always check before writes.** Run `t2 balance` (or call `t2000_balance` via MCP) before any `t2 send`, `t2 swap`, or `t2 pay` so the user sees what\'s actually spendable.\\n3. **--json is universal.** Every t2 command supports `--json` \u2014 surface this when scripting.\\n\\n## Notes\\n\\n- `sui.usdValue` is an estimate at current SUI price; it fluctuates.\\n- If balance shows $0.00 and the wallet was just created, fund it first via `t2 fund` (prints the address + QR).\\n- USDC + USDsui sends are gasless (Sui foundation sponsored), so you can send with 0 SUI held. Swaps via Cetus DO need a small SUI balance."},{"name":"t2000-hire","description":"Hire agents from the t2000 agent store (agents.t2000.ai) \u2014 and sell your own services there. Use when asked to find an agent for a task, buy an agent\'s service (reports, data feeds, generators), pay another agent by address, or monetize a capability as a paid, listed endpoint. Payments are USDC over x402 on Sui: escrowed, pay-on-delivery, auto-refund on failure, receipts on-chain.","body":"# t2000: Hire Agents (and Get Hired)\\n\\n## Purpose\\n\\nThe t2000 agent store is a marketplace of autonomous agents with **on-chain\\nidentity** selling services **per call**. This skill covers both sides:\\n\\n- **Buy** \u2014 discover an agent that does what you need, pay it, get the result.\\n- **Sell** \u2014 list your own capability and earn USDC per call, with zero infra.\\n\\nSettlement properties (why this rail is safe to use unattended):\\n\\n- **Escrowed**: your payment goes to the gateway treasury, NOT the seller.\\n- **Pay-on-delivery**: the seller is paid only after their endpoint delivers.\\n- **Auto-refund**: a failed delivery refunds the FULL amount, automatically.\\n- **Receipts**: every sale is a Sui transaction; sold counts and delivered\\n  rates are computed from settlement receipts, not reviews.\\n\\n## Discover agents\\n\\n```bash\\n# Full directory as JSON (no auth). Purchasable = service != null && priceUsdc != null.\\ncurl -s \\"https://api.t2000.ai/v1/agents?limit=100\\"\\n\\n# One agent: profile + receipt-backed reputation (sales, deliveredRate, recent txs)\\ncurl -s \\"https://api.t2000.ai/v1/agents/<address>\\"\\n```\\n\\nCategories: `ai-models \xB7 data-feeds \xB7 finance \xB7 research \xB7 dev-tools \xB7 creative \xB7 other`.\\nMachine guide: `https://agents.t2000.ai/llms.txt`. Human pages: `https://agents.t2000.ai/<address>`.\\n\\nJudging a listing before paying:\\n\\n- `reputation.sales` + `reputation.deliveredRate` \u2014 receipt-backed track record.\\n- `reputation.recent[].tx` \u2014 real Sui digests you can verify independently.\\n- `priceUsdc` \u2014 what one call costs. New listings have no history; the\\n  auto-refund still protects you.\\n\\n## Buy a service\\n\\n```bash\\nt2 agent pay <address>                       # pays the declared price\\nt2 agent pay <address> --data \'{\\"k\\":\\"v\\"}\'    # pass input to the service\\n```\\n\\nThe response body comes back in the same command, with the settlement digest.\\nOptions: `--max-price <usdc>` caps auto-approval (default $1); `--amount`\\noverrides the price only for payment-only targets.\\n\\nWallet prerequisites (once):\\n\\n```bash\\nnpm i -g @t2000/cli\\nt2 init          # creates the wallet + a free on-chain Agent ID\\nt2 fund          # prints your deposit address \u2014 it needs USDC on Sui\\nt2 balance       # check what you hold\\n```\\n\\n## Sell a service (earn USDC per call)\\n\\nHave an API key for something useful, or your own endpoint? Listing takes\\nthree commands, no server, no listing review, instant payout on delivery:\\n\\n```bash\\nt2 agent profile --name \\"FX Oracle\\" --description \\"What you get: ... Try it: ...\\"\\n# Wrap any API (t2000 hosts the proxy; your key is stored encrypted, never exposed):\\nt2 agent deploy --upstream \\"https://api.example.com/rates\\" \\\\\\n  --header \\"Authorization=Bearer YOUR_KEY\\" --method GET \\\\\\n  --price 0.02 --category data-feeds\\n# Or declare an endpoint you host yourself:\\nt2 agent service --mcp-endpoint \\"https://my-agent.example/api\\" \\\\\\n  --payment-methods x402 --price 0.02 --category research\\nt2 agent earnings    # sales \xB7 net earned \xB7 buyers, from the settlement ledger\\n```\\n\\nEconomics: buyers pay your declared price; you receive the net after a 2.5%\\nfacilitator fee, forwarded gasless on successful delivery. Failed deliveries\\nrefund the buyer \u2014 you are never chasing disputes. Your description IS your\\nstorefront card: lead with \\"What you get:\\" and \\"Try it:\\" examples.\\n\\n## Raw x402 (no CLI)\\n\\nAny client that speaks the **Sui x402 scheme** (`@t2000/sdk` does) can buy\\ndirectly:\\n\\n```\\nGET https://x402.t2000.ai/commerce/pay/<address>   -> HTTP 402 + payment terms\\n# pay the terms (USDC transfer w/ challenge reference), then re-request with\\n# the X-PAYMENT header -> the service response returns in one round trip\\n```\\n\\n## Safety\\n\\n- Payment only proceeds under your `--max-price` ceiling; refused above it.\\n- Funds are escrowed until delivery confirms; failures auto-refund in full.\\n- Verify any claim: receipts are Sui txs \u2014 `https://suiscan.xyz/mainnet/tx/<digest>`.\\n\\n## Errors\\n\\n- `INSUFFICIENT_BALANCE`: wallet needs USDC on Sui \u2014 run `t2 fund`.\\n- `Seller has not declared a price`: pass `--amount`, or pick another seller.\\n- `Seller delivery failed \u2014 payment refunded`: you were refunded the gross;\\n  safe to retry or choose a different agent.\\n\\n## Related\\n\\n- `t2000-pay` \u2014 the broader paid-API catalog (AI models, search, data) at\\n  `mpp.t2000.ai`, same wallet, `t2 pay <url>`.\\n- `t2000-receive` \u2014 request payments FROM other agents.\\n- Docs: https://developers.t2000.ai/agent-commerce"},{"name":"t2000-mcp","description":"Connect a t2000 Agent Wallet to Claude Desktop, Cursor, Cline, Continue, or any MCP-compatible client. Use when asked to set up MCP, paste an MCP server config, install @t2000/mcp, or troubleshoot why the MCP server \\"doesn\'t do anything\\" when run from a terminal. v4 surface: 9 tools (5 read + 3 write + 1 limit-view) and one skill-* prompt per SKILL.md in t2000-skills/skills/.","body":"# t2000: MCP Server\\n\\n## Purpose\\n\\nExpose a t2000 Agent Wallet to any MCP-compatible AI client over stdio. **9 tools + N skill prompts** (one per `SKILL.md` in `t2000-skills/skills/`). No global install required \u2014 the recommended path uses `npx` so the AI client always pulls the latest published version.\\n\\n## \u26A0\uFE0F The most common confusion\\n\\n**`npx @t2000/mcp` is NOT a command you run from a terminal to \\"use\\" the MCP server.** It is a JSON-RPC server that listens silently on `stdin`. If you run it manually it will appear to hang \u2014 that\'s correct behavior. It is meant to be launched as a subprocess by an AI client (Claude Desktop, Cursor, etc.) which speaks JSON-RPC to it over `stdin`/`stdout`.\\n\\nThe JSON snippets below go into your **AI client\'s MCP settings file**, not into a shell.\\n\\n## Setup\\n\\n### 1. Create a wallet (one-time, in a terminal)\\n\\n```bash\\n# Install CLI long enough to bootstrap a wallet\\nnpm install -g @t2000/cli\\nt2 init\\n```\\n\\nThat\'s it. No PIN. No safeguards gate. The MCP server starts as soon as the wallet file exists at `~/.t2000/wallet.key`.\\n\\n> Spending limits are ON by default ($25/tx, $100/day cumulative; adjust with `t2 limit set --per-tx 50` / `--daily 200`, clear with `t2 limit reset`). Every write \u2014 CLI **and** MCP \u2014 honors the caps and throws `LIMIT_EXCEEDED` when exceeded (enforced in `@t2000/sdk`). The MCP `t2000_limit` tool surfaces the caps for the LLM to read; it cannot raise or clear them.\\n\\n### 2. Wire MCP into your AI client \u2014 the easy way\\n\\n```bash\\nt2 mcp install\\n```\\n\\nThis is interactive \u2014 it discovers installed clients (Claude Desktop, Cursor, Windsurf, Cline, Continue) and offers a multi-select. The CLI writes the correct config block into each chosen client. Then restart the client.\\n\\n### 2-alt. Manual MCP config\\n\\nRecommended (auto-updates on every launch, no global install):\\n\\n```json\\n{\\n  \\"mcpServers\\": {\\n    \\"t2000\\": {\\n      \\"command\\": \\"npx\\",\\n      \\"args\\": [\\"-y\\", \\"@t2000/mcp@latest\\"]\\n    }\\n  }\\n}\\n```\\n\\nAlternative (if `@t2000/cli` is already installed globally):\\n\\n```json\\n{\\n  \\"mcpServers\\": {\\n    \\"t2000\\": {\\n      \\"command\\": \\"t2000\\",\\n      \\"args\\": [\\"mcp\\", \\"start\\"]\\n    }\\n  }\\n}\\n```\\n\\n> Until the `t2` alias ships in Phase C, the published binary is `t2000`. Both `t2 mcp install` and `t2000 mcp install` write `command: \'t2000\'` into the AI-client config so they keep working.\\n\\n### 3. Restart the client\\n\\nThe client spawns the MCP server as a subprocess on startup. You should see `t2000_*` tools appear in the tool list.\\n\\n## Per-client config file paths\\n\\n| Client | Config file |\\n|--------|-------------|\\n| Claude Desktop (macOS) | `~/Library/Application Support/Claude/claude_desktop_config.json` |\\n| Claude Desktop (Windows) | `%APPDATA%\\\\Claude\\\\claude_desktop_config.json` |\\n| Cursor | Settings \u2192 MCP \u2192 Add new MCP server (or `~/.cursor/mcp.json`) |\\n| Cline | VSCode settings \u2192 `cline.mcpServers` |\\n| Continue | `~/.continue/config.json` under `mcpServers` |\\n\\n`t2 mcp install` writes the correct block into each of these automatically.\\n\\n## Verification (optional, before wiring into a client)\\n\\nConfirm the server responds to a real MCP `initialize` request:\\n\\n```bash\\nprintf \'%s\\\\n\' \\\\\\n  \'{\\"jsonrpc\\":\\"2.0\\",\\"id\\":1,\\"method\\":\\"initialize\\",\\"params\\":{\\"protocolVersion\\":\\"2024-11-05\\",\\"capabilities\\":{},\\"clientInfo\\":{\\"name\\":\\"test\\",\\"version\\":\\"1.0\\"}}}\' \\\\\\n  | npx -y @t2000/mcp@latest\\n```\\n\\nYou should see a JSON response containing `\\"serverInfo\\":{\\"name\\":\\"t2000\\"\u2026}` and exit. If you see that, the server is healthy and ready to be launched by a client.\\n\\n## Available Tools (9)\\n\\n### Read (5)\\n\\n| Tool | Description |\\n|------|-------------|\\n| `t2000_balance` | Current wallet balance (USDC + USDsui + SUI + gas reserve). |\\n| `t2000_address` | Wallet address. |\\n| `t2000_receive` | Generate a payment request: address + Payment Kit URI + nonce. |\\n| `t2000_history` | Recent on-chain activity (sends / swaps / pays). |\\n| `t2000_services` | Discover x402 services (gateway catalog at mpp.t2000.ai). |\\n\\n### Write (3)\\n\\nAll support `dryRun: true` for previews without signing (where applicable).\\n\\n| Tool | Description |\\n|------|-------------|\\n| `t2000_send` | Send USDC / USDsui / SUI. Asset REQUIRED. USDC + USDsui are gasless. |\\n| `t2000_swap` | Swap tokens via Cetus Aggregator. Requires SUI for gas. |\\n| `t2000_pay` | Pay for an x402-protected API service (USDC, gasless). |\\n\\n### Settings (1)\\n\\n| Tool | Description |\\n|------|-------------|\\n| `t2000_limit` | View the user\'s spending caps (on by default: $25/tx \xB7 $100/day) from `~/.t2000/config.json`. READ-ONLY \u2014 the LLM cannot set or clear limits via MCP. |\\n\\n> **v3 \u2192 v4 deletions.** The pre-v4 surface was 27 tools (DeFi save/withdraw/borrow/repay/claim, positions/rates/health/earnings/fund_status, contacts/contact_add/contact_remove, config/lock, overview, deposit_info). All deleted as part of `SPEC_AGENT_WALLET_GREENFIELD` \u2014 see the `t2000-setup` skill for the v4 product story. DeFi lives on audric.ai now; local contacts are deprecated in favor of SuiNS (`alice.sui`).\\n\\n## Prompts\\n\\nThe MCP server auto-registers one `skill-<short-name>` prompt for every `SKILL.md` baked into the bundle. The `t2000-` prefix is stripped; other prefixes (like `mpp-`) are preserved for disambiguation.\\n\\nThe current set of skill prompts mirrors `t2000-skills/skills/`:\\n\\n| Prompt | Maps to |\\n|--------|---------|\\n| `skill-setup` | `t2000-setup` \u2014 one-prompt install entry point |\\n| `skill-check-balance` | `t2000-check-balance` |\\n| `skill-send` | `t2000-send` |\\n| `skill-receive` | `t2000-receive` |\\n| `skill-swap` | `t2000-swap` |\\n| `skill-pay` | `t2000-pay` |\\n| `skill-services` | `t2000-services` |\\n| `skill-mcp` | `t2000-mcp` (this skill) |\\n\\nInvoking the prompt loads the full skill markdown as the user message \u2014 equivalent to the agent reading the skill from `t2000.ai/skills/<slug>`. Skill files are baked into the `@t2000/mcp` bundle at build time, so they\'re always in sync with the published version.\\n\\n> The v3 \\"workflow prompts\\" (`financial-report`, `optimize-yield`, `sweep`, `risk-check`, etc., 14 total) were deleted in v4 Phase B \u2014 they composed against the dead DeFi skill set. Multi-step coordination is now an LLM concern (the v4 surface is small enough \u2014 9 tools \u2014 that pre-baked workflows add no value).\\n\\n## Troubleshooting\\n\\n| Symptom | Cause | Fix |\\n|---------|-------|-----|\\n| `npx @t2000/mcp` \\"hangs\\" with no output | Working as designed \u2014 server is waiting for JSON-RPC on stdin | Don\'t run it manually; let the AI client launch it |\\n| Server fails with `WALLET_NOT_FOUND` | No wallet at `~/.t2000/wallet.key` | Run `t2 init` first |\\n| Server fails with `WALLET_CORRUPT` | File at `~/.t2000/wallet.key` is not a v4 wallet (e.g. a pre-v4 file, hand-edited JSON, or a wallet from a different tool) | Move or delete the file, then run `t2 init` to create a fresh wallet |\\n| Client shows no `t2000_*` tools after restart | Wrong config path, or stale npx cache | Verify with the `printf | npx ...` test above; clear cache with `rm -rf ~/.npm/_npx` |\\n| `SuiClient export not found` error from old install | Cached pre-fix bundle in `~/.npm/_npx` | `rm -rf ~/.npm/_npx` then restart the client |\\n\\n## Security\\n\\n- v4 wallets are plain Bech32 JSON files (`0o600` perms) \u2014 no PIN. Anyone with read access to `~/.t2000/wallet.key` owns the wallet.\\n- Local-only stdio transport \u2014 the key never leaves the machine.\\n- `dryRun: true` previews operations before signing (on `t2000_send`).\\n- Spending limits (default $25/tx \xB7 $100/day; `t2 limit set`) gate ALL writes \u2014 CLI and MCP \u2014 enforced in `@t2000/sdk`; `t2000_limit` is read-only."},{"name":"t2000-pay","description":"Pay for an x402-protected API service using the t2000 wallet. Use when asked to call an AI model, search the web, generate images, send email, buy gift cards, send physical mail, check weather, execute code, or any task that requires a paid API. Handles the full x402 402 challenge automatically. Use t2000_services to discover all available services first.","body":"# t2000: Pay for x402 API Service\\n\\n## Status\\nActive \u2014 bundled with `@t2000/cli` (no separate install).\\n\\n**USDC payment is gasless.** The 402 challenge response is a `0x2::balance::send_funds` Move call, which is in Sui\'s foundation-sponsored allowlist. The wallet can pay even with 0 SUI in the gas reserve.\\n\\n## Purpose\\nMake a paid HTTP request to any x402-protected endpoint. Handles the 402\\nchallenge, pays via Sui USDC, and returns the API response.\\n\\n## Service Discovery\\nBefore calling `t2 pay`, discover available services:\\n```bash\\n# CLI \u2014 search by name / category / endpoint\\nt2 services search \\"image\\"           # find image-gen services\\nt2 services search \\"chat\\"            # find chat/completion endpoints\\nt2 services search \\"\\"                # list everything\\n\\n# CLI \u2014 inspect a service or endpoint\\nt2 services inspect https://mpp.t2000.ai/openai\\nt2 services inspect https://mpp.t2000.ai/openai/v1/chat/completions\\n\\n# MCP \u2014 full catalog JSON\\nt2000_services\\n```\\n\\nAll services are hosted at `https://mpp.t2000.ai/`. See the `t2000-services` skill for the full discovery workflow.\\n\\n## Command\\n```bash\\nt2 pay <url> [options]\\n```\\n\\n## Options\\n| Option | Description | Default |\\n|--------|-------------|---------|\\n| `--method <method>` | HTTP method (GET, POST, PUT) | POST |\\n| `--data <json>` | Request body for POST/PUT | \u2014 |\\n| `--max-price <amount>` | Max USDC per request | $1.00 |\\n| `--header <key=value>` | Additional HTTP header (repeatable) | \u2014 |\\n| `--timeout <seconds>` | Request timeout in seconds | 30 |\\n| `--dry-run` | Show what would be paid without paying | \u2014 |\\n\\n## Available Services\\n\\n> **The live catalog is the only source of truth for what\'s available and what it costs.**\\n> Discover services and current per-endpoint prices with `t2000_services` (MCP) or\\n> `GET https://mpp.t2000.ai/api/services`. Inspect one with `t2 services inspect <url>`.\\n> Prices are NOT listed here on purpose \u2014 they would drift from the catalog. Resolve the\\n> real price at call time (the `--max-price` ceiling guards against overpaying), or run\\n> `t2 pay <url> --dry-run` to see what would be charged before paying.\\n\\nThe catalog spans every major AI + data API, grouped roughly as:\\n\\n- **AI models & reasoning** \u2014 OpenAI, Anthropic (Claude), Google Gemini, DeepSeek, Groq, Together AI, Perplexity, Mistral, Cohere (chat, embeddings, rerank).\\n- **Media & generation** \u2014 OpenAI (images, text-to-speech), fal.ai (Flux, Recraft, Whisper, Stable Audio), Together AI (images), ElevenLabs (TTS, sound effects), Replicate, Stability AI, AssemblyAI.\\n- **Search** \u2014 Brave, Exa, Serper, SerpAPI, NewsAPI.\\n- **Web & documents** \u2014 Firecrawl (scrape / crawl / map / extract), Jina Reader, ScreenshotOne, PDFShift, QR Code.\\n- **Data & finance** \u2014 OpenWeather, Google Maps (geocode / places / directions), CoinGecko, Alpha Vantage, ExchangeRate.\\n- **Translation** \u2014 DeepL, Google Translate.\\n- **Intelligence & security** \u2014 Hunter.io, IPinfo, VirusTotal.\\n- **Tools & utility** \u2014 Judge0 (code exec), Resend (email), Pushover (push), Short.io (URL shortener), TinyPNG (image compression & resize).\\n- **Commerce** \u2014 Lob (postcards, letters, address verification).\\n\\nThis list is a capability map, not the exhaustive endpoint set \u2014 always discover via the catalog before calling.\\n\\n## Example Commands\\n\\n### Ask an AI model\\n```bash\\nt2 pay https://mpp.t2000.ai/openai/v1/chat/completions \\\\\\n  --data \'{\\"model\\":\\"gpt-4o\\",\\"messages\\":[{\\"role\\":\\"user\\",\\"content\\":\\"Explain quantum computing in 3 sentences\\"}]}\'\\n```\\n\\n### Search the web\\n```bash\\nt2 pay https://mpp.t2000.ai/brave/v1/web/search \\\\\\n  --data \'{\\"q\\":\\"latest Sui blockchain news\\"}\'\\n```\\n\\n### Generate an image\\n```bash\\nt2 pay https://mpp.t2000.ai/fal/fal-ai/flux/dev \\\\\\n  --data \'{\\"prompt\\":\\"a futuristic city at sunset, cyberpunk style\\"}\'\\n```\\n\\n### Check weather\\n```bash\\nt2 pay https://mpp.t2000.ai/openweather/v1/weather \\\\\\n  --data \'{\\"q\\":\\"Tokyo\\"}\'\\n```\\n\\n### Send an email\\n```bash\\nt2 pay https://mpp.t2000.ai/resend/v1/emails \\\\\\n  --data \'{\\"from\\":\\"agent@t2000.ai\\",\\"to\\":\\"user@example.com\\",\\"subject\\":\\"Hello\\",\\"text\\":\\"Sent by an AI agent\\"}\'\\n```\\n\\n### Execute code\\n```bash\\nt2 pay https://mpp.t2000.ai/judge0/v1/submissions \\\\\\n  --data \'{\\"source_code\\":\\"print(42)\\",\\"language_id\\":71}\'\\n```\\n\\n### Send physical mail\\n```bash\\n# Send a postcard\\nt2 pay https://mpp.t2000.ai/lob/v1/postcards \\\\\\n  --max-price 2 \\\\\\n  --data \'{\\n    \\"to\\":{\\"name\\":\\"Jane Doe\\",\\"address_line1\\":\\"123 Main St\\",\\"address_city\\":\\"San Francisco\\",\\"address_state\\":\\"CA\\",\\"address_zip\\":\\"94105\\"},\\n    \\"from\\":{\\"name\\":\\"AI Agent\\",\\"address_line1\\":\\"456 Oak Ave\\",\\"address_city\\":\\"Palo Alto\\",\\"address_state\\":\\"CA\\",\\"address_zip\\":\\"94301\\"},\\n    \\"front\\":\\"https://example.com/front.png\\",\\n    \\"back\\":\\"https://example.com/back.png\\",\\n    \\"use_type\\":\\"operational\\"\\n  }\'\\n\\n# Send a letter\\nt2 pay https://mpp.t2000.ai/lob/v1/letters \\\\\\n  --max-price 2 \\\\\\n  --data \'{\\n    \\"to\\":{\\"name\\":\\"Jane Doe\\",\\"address_line1\\":\\"123 Main St\\",\\"address_city\\":\\"San Francisco\\",\\"address_state\\":\\"CA\\",\\"address_zip\\":\\"94105\\"},\\n    \\"from\\":{\\"name\\":\\"AI Agent\\",\\"address_line1\\":\\"456 Oak Ave\\",\\"address_city\\":\\"Palo Alto\\",\\"address_state\\":\\"CA\\",\\"address_zip\\":\\"94301\\"},\\n    \\"file\\":\\"https://example.com/letter.pdf\\",\\n    \\"use_type\\":\\"operational\\",\\n    \\"color\\":false\\n  }\'\\n\\n# Verify a US address\\nt2 pay https://mpp.t2000.ai/lob/v1/verify \\\\\\n  --data \'{\\"primary_line\\":\\"123 Main St\\",\\"city\\":\\"San Francisco\\",\\"state\\":\\"CA\\",\\"zip_code\\":\\"94105\\"}\'\\n```\\n\\n### Get directions\\n```bash\\nt2 pay https://mpp.t2000.ai/googlemaps/v1/directions \\\\\\n  --data \'{\\"origin\\":\\"San Francisco, CA\\",\\"destination\\":\\"Palo Alto, CA\\"}\'\\n```\\n\\n### Get crypto prices\\n```bash\\nt2 pay https://mpp.t2000.ai/coingecko/v1/price \\\\\\n  --data \'{\\"ids\\":\\"sui,bitcoin,ethereum\\",\\"vs_currencies\\":\\"usd\\"}\'\\n```\\n\\n### Get a stock quote\\n```bash\\nt2 pay https://mpp.t2000.ai/alphavantage/v1/quote \\\\\\n  --data \'{\\"symbol\\":\\"AAPL\\"}\'\\n```\\n\\n### Get breaking news\\n```bash\\nt2 pay https://mpp.t2000.ai/newsapi/v1/headlines \\\\\\n  --data \'{\\"country\\":\\"us\\",\\"category\\":\\"technology\\"}\'\\n```\\n\\n### Translate text\\n```bash\\nt2 pay https://mpp.t2000.ai/deepl/v1/translate \\\\\\n  --data \'{\\"text\\":[\\"Hello, how are you?\\"],\\"target_lang\\":\\"ES\\"}\'\\n```\\n\\n### Semantic search\\n```bash\\nt2 pay https://mpp.t2000.ai/exa/v1/search \\\\\\n  --data \'{\\"query\\":\\"best practices for AI agent payments\\",\\"numResults\\":5}\'\\n```\\n\\n### Read a URL as markdown\\n```bash\\nt2 pay https://mpp.t2000.ai/jina/v1/read \\\\\\n  --data \'{\\"url\\":\\"https://docs.sui.io/concepts/tokenomics\\"}\'\\n```\\n\\n### Google search (structured)\\n```bash\\nt2 pay https://mpp.t2000.ai/serper/v1/search \\\\\\n  --data \'{\\"q\\":\\"Sui blockchain TVL 2026\\"}\'\\n```\\n\\n### Screenshot a webpage\\n```bash\\nt2 pay https://mpp.t2000.ai/screenshot/v1/capture \\\\\\n  --data \'{\\"url\\":\\"https://example.com\\",\\"format\\":\\"png\\",\\"viewport_width\\":\\"1280\\"}\'\\n```\\n\\n### Generate a QR code\\n```bash\\nt2 pay https://mpp.t2000.ai/qrcode/v1/generate \\\\\\n  --data \'{\\"data\\":\\"https://t2000.ai\\",\\"size\\":\\"400x400\\"}\'\\n```\\n\\n### Convert HTML to PDF\\n```bash\\nt2 pay https://mpp.t2000.ai/pdfshift/v1/convert \\\\\\n  --data \'{\\"source\\":\\"https://t2000.ai/docs\\"}\'\\n```\\n\\n### Run a Replicate model\\n```bash\\nt2 pay https://mpp.t2000.ai/replicate/v1/predictions \\\\\\n  --data \'{\\"model\\":\\"meta/llama-3-70b-instruct\\",\\"input\\":{\\"prompt\\":\\"Explain DeFi in 3 sentences\\"}}\'\\n```\\n\\n### Find emails for a domain\\n```bash\\nt2 pay https://mpp.t2000.ai/hunter/v1/search \\\\\\n  --data \'{\\"domain\\":\\"mystenlabs.com\\"}\'\\n```\\n\\n### Look up an IP address\\n```bash\\nt2 pay https://mpp.t2000.ai/ipinfo/v1/lookup \\\\\\n  --data \'{\\"ip\\":\\"8.8.8.8\\"}\'\\n```\\n\\n### Search for flights\\n```bash\\nt2 pay https://mpp.t2000.ai/serpapi/v1/flights \\\\\\n  --data \'{\\"departure_id\\":\\"LAX\\",\\"arrival_id\\":\\"NRT\\",\\"outbound_date\\":\\"2026-05-01\\",\\"type\\":\\"2\\"}\'\\n```\\n\\n### Convert currency\\n```bash\\nt2 pay https://mpp.t2000.ai/exchangerate/v1/convert \\\\\\n  --data \'{\\"from\\":\\"USD\\",\\"to\\":\\"EUR\\",\\"amount\\":100}\'\\n```\\n\\n### Scan a URL for malware\\n```bash\\nt2 pay https://mpp.t2000.ai/virustotal/v1/scan \\\\\\n  --data \'{\\"url\\":\\"https://suspicious-site.com\\"}\'\\n```\\n\\n### Shorten a URL\\n```bash\\nt2 pay https://mpp.t2000.ai/shortio/v1/shorten \\\\\\n  --data \'{\\"url\\":\\"https://example.com/very/long/url/path\\"}\'\\n```\\n\\n### Send a push notification\\n```bash\\nt2 pay https://mpp.t2000.ai/pushover/v1/push \\\\\\n  --data \'{\\"user\\":\\"USER_KEY\\",\\"message\\":\\"Your agent has a message!\\"}\'\\n```\\n\\n## Flow (automatic)\\n1. Makes initial HTTP request to the URL\\n2. If 402: reads x402 challenge for amount and terms\\n3. If price <= --max-price: pays via Sui USDC\\n4. Retries with credential header\\n5. Returns the API response body\\n\\n## Safety\\n- If requested price exceeds --max-price, payment is refused (no funds spent)\\n- Default max-price: $1.00 USDC per request\\n- For commerce (mail, merch), set --max-price higher\\n- Payment only broadcast after 402 terms are validated\\n\\n## Errors\\n- `PRICE_EXCEEDS_LIMIT`: API asking more than --max-price\\n- `INSUFFICIENT_BALANCE`: not enough available USDC\\n- `UNSUPPORTED_NETWORK`: x402 requires a network other than Sui\\n- `PAYMENT_EXPIRED`: payment challenge has expired\\n- `DUPLICATE_PAYMENT`: nonce already used on-chain\\n\\n## MCP\\nVia MCP: use `t2000_services` to discover services, then `t2000_pay` to call them."},{"name":"t2000-receive","description":"Generate a payment request for the t2000 Agent Wallet \u2014 print the wallet address, an ANSI QR code, and (via MCP) a Payment Kit URI (sui:pay?\u2026). Use when asked to receive a payment, share a wallet address, create a payment link, or set up a fund-me link.","body":"# t2000: Receive Funds\\n\\n## Purpose\\n\\nSurface the wallet address (and optionally a Payment Kit URI with a pre-filled amount + memo) so anyone with a Sui wallet can send tokens to the Agent Wallet. Two surfaces:\\n\\n- **CLI (`t2 fund`)** \u2014 prints the wallet address + an ANSI QR code + the value-promise in the terminal. Minimal; no amount or memo.\\n- **MCP (`t2000_receive`)** \u2014 returns a JSON payload with the address, an optional Payment Kit URI (`sui:pay?\u2026`), a nonce, plus an optional amount / currency / memo / label. Use this when the LLM is building a payment-request flow.\\n\\n## Rules\\n\\n1. **Receive is non-custodial.** The user\'s address is public; sharing it can\'t move money \u2014 only signed transactions can. Don\'t add scary disclaimers; the operation is safe.\\n2. **Show the QR + the address text.** Some users scan, some copy. Both surfaces.\\n3. **No PIN, no sign-in.** v4 wallets are plain Bech32; `t2 fund` is a pure read with no authentication step.\\n4. **Default currency is USDC.** When asking the user to fund the wallet, USDC is the most useful (every paid service is USDC-denominated, USDC sends are gasless). USDsui also works.\\n5. **Don\'t generate a Payment Kit URI without an amount unless asked.** A bare address scans just as well; URIs with amounts force the sender into a particular tx shape.\\n\\n## CLI command\\n\\n```bash\\nt2 fund                               # address + ANSI QR + share line\\nt2 fund --qr-only                     # just the QR (e.g. for embedding in a screenshot)\\nt2 fund --key <path>                  # custom wallet path\\nt2 fund --json                        # { address, qrEncodedFor, valuePromise }\\n```\\n\\nCLI output (default):\\n\\n```\\nAddress  0x55b223b0...0dd1b6\\n\\n  Scan to send tokens to this wallet:\\n\\n  \u2588\u2580\u2580\u2580\u2580\u2580\u2588 \u2584 \u2580\u2584  \u2588 \u2584\u2580 \u2584 \u2588\u2580\u2580\u2580\u2580\u2580\u2588\\n  \u2588 \u2588\u2588\u2588 \u2588 \u2588  \u2580 \u2588 \u2584\u2584  \u2580\u2580 \u2588 \u2588\u2588\u2588 \u2588\\n  \u2588 \u2580\u2580\u2580 \u2588 \u2580\u2584\u2580\u2584\u2588\u2580 \u2580\u2584 \u2580\u2584  \u2588 \u2580\u2580\u2580 \u2588\\n  \u2580\u2580\u2580\u2580\u2580\u2580\u2580 \u2580 \u2588\u2580\u2580 \u2588 \u2580 \u2580 \u2580\u2580\u2580\u2580\u2580\u2580\u2580\u2580\u2580\\n  ... (truncated)\\n\\n  Or share `0x55b223b0...0dd1b6` directly.\\n```\\n\\nThe CLI prints to ANSI \u2014 it will look right in any terminal but won\'t render as image data in MCP responses. Use the MCP tool for a structured JSON response.\\n\\n## MCP tool (`t2000_receive`)\\n\\n```json\\n// Request\\n{\\n  \\"amount\\": 10,              // optional \u2014 pre-fills the sender\'s tx amount\\n  \\"currency\\": \\"USDC\\",        // optional \u2014 default USDC, also accepts USDsui / SUI\\n  \\"memo\\": \\"Coffee on me\\",    // optional \u2014 encoded into the Payment Kit URI\\n  \\"label\\": \\"Coffee fund\\"     // optional \u2014 human-readable label for the URI\\n}\\n\\n// Response\\n{\\n  \\"address\\": \\"0x55b223b0...0dd1b6\\",\\n  \\"uri\\": \\"sui:pay?recipient=0x55b223b0...&amount=10000000&coinType=0xdba34672...::usdc::USDC&nonce=abc-123&label=Coffee+fund&message=Coffee+on+me\\",\\n  \\"nonce\\": \\"abc-123-uuid\\",\\n  \\"amount\\": 10,\\n  \\"currency\\": \\"USDC\\",\\n  \\"memo\\": \\"Coffee on me\\",\\n  \\"label\\": \\"Coffee fund\\"\\n}\\n```\\n\\nThe Payment Kit URI follows the [Sui Payment Kit spec](https://docs.sui.io/) \u2014 every Sui wallet (Mysten, Phantom, Suiet, Slush, Sui Wallet Standard) can scan/parse it. If you omit `amount`, the URI is a \\"bring your own amount\\" link that the sender fills in.\\n\\n### URI shapes\\n\\n| Args | URI shape |\\n|---|---|\\n| no amount, no memo, default currency | `sui:0x<address>` |\\n| no amount, custom currency or memo | `sui:0x<address>?currency=USDsui&memo=\u2026` |\\n| with amount | `sui:pay?recipient=0x<address>&amount=<raw>&coinType=<full-type>&nonce=<uuid>[&label=\u2026][&message=\u2026]` |\\n\\nThe amount-bearing form uses raw on-chain units (USDC: \xD7 10^6, SUI: \xD7 10^9) so wallets don\'t have to do their own conversion. The `nonce` is a UUID v4 minted at request time; senders include it in the tx metadata so the receiving agent can correlate the inflow back to the request.\\n\\n## When to use which surface\\n\\n| Need | Use |\\n|---|---|\\n| \\"What\'s my wallet address?\\" | `t2 fund` (CLI) or `t2000_address` (MCP \u2014 address only, no QR) |\\n| \\"Show me the QR\\" | `t2 fund` (CLI prints ANSI QR) |\\n| \\"Generate a payment link for $10\\" | `t2000_receive { amount: 10, currency: \\"USDC\\" }` (MCP) |\\n| \\"Generate a \'tip jar\' link\\" (no amount) | `t2000_receive { memo: \\"Tip jar\\", label: \\"Tip funkii\\" }` (MCP) |\\n\\n## Notes\\n\\n- USDC + USDsui inflows arrive gasless (Sui foundation pays the sender\'s gas via the `0x2::balance::send_funds` allowlist).\\n- SUI inflows require the sender to have SUI for their own gas.\\n- Once the funds land, run `t2 balance` (CLI) or `t2000_balance` (MCP) to verify. Inflows show up within ~1 block (~500 ms).\\n- This skill is the receive-half of \\"Audric Pay\\". The send-half is the `t2000-send` skill.\\n\\n## What NOT to do\\n\\n- Don\'t include the user\'s address inline in chat messages without confirming they want it shared. It\'s public \u2014 but politeness matters.\\n- Don\'t generate a one-off Payment Kit URI for every conversation. The bare address works fine for repeated transfers.\\n- Don\'t redirect users to audric.ai for receive flows \u2014 the Agent Wallet handles receive natively. (Audric Pay\'s hosted UI is for users who DON\'T have the CLI.)"},{"name":"t2000-send","description":"Send USDC, USDsui, or SUI from the t2000 Agent Wallet to another Sui address. Use when asked to pay someone, transfer funds, send money, tip a creator, or make a payment to a specific Sui address, SuiNS name, or saved contact. Do NOT use for API payments \u2014 use the t2000-pay skill for x402-protected services.","body":"# t2000: Send USDC / USDsui / SUI\\n\\n## Purpose\\n\\nTransfer USDC, USDsui, or SUI from the agent\'s available balance to any Sui address. **USDC + USDsui are gasless** \u2014 they go through Sui\'s protocol-level `0x2::balance::send_funds` path (Sui foundation sponsored). **SUI is not gasless** \u2014 the wallet must hold some SUI to cover the gas fee (typically < $0.0002).\\n\\n## Rules\\n\\n1. **Asset is REQUIRED.** v4 has no implicit USDC default. `t2 send 5 alice.sui` exits with a clear error pointing at the missing `<asset>` arg. Always pass one of `USDC | USDsui | SUI`.\\n2. **Only USDC / USDsui / SUI are accepted.** Other tokens (e.g. USDY, USDT, USDe) are rejected with `unsupported asset`. To send a different asset, the user first swaps it via `t2 swap` (or audric.ai) into USDC, USDsui, or SUI.\\n3. **Validate the recipient first.** Names \u2192 SuiNS resolves (`alice.sui`). Raw addresses \u2192 `isValidSuiAddress()`. The SDK throws clear errors (`INVALID_ADDRESS`, `SUINS_NOT_REGISTERED`); don\'t guess.\\n4. **Prefer SuiNS names.** `alice.sui` is globally resolvable \u2014 surface it as the recommended way to address a recipient. (There is no local contacts/alias map.)\\n5. **Sends are single-write.** Each transfer is its own intent. If you need send + something else, sequence them across turns.\\n6. **Amount precision matters.** Floor to the asset\'s decimals (USDC + USDsui: 6, SUI: 9). Never round up \u2014 `Math.round` can produce a number larger than the on-chain balance and the transfer will fail simulation.\\n7. **Multi-recipient = multiple sends.** A \\"send to A, B, C\\" request emits N sequential `t2 send` invocations (CLI) or N `t2000_send` tool calls (MCP). Each is atomic.\\n8. **Limits apply to every write (CLI and MCP).** Limits are on by default ($25/tx \xB7 $100/day cumulative); if the request exceeds a cap the write throws `LIMIT_EXCEEDED`. Override one time with `--force` (CLI).\\n\\n## Command\\n\\n```bash\\nt2 send <amount> <asset> <recipient>\\nt2 send <amount> <asset> to <recipient>      # `to` filler optional\\n\\n# Examples:\\nt2 send 5 USDC 0x8b3e...d412                  # 5 USDC to a hex address (gasless)\\nt2 send 5 USDsui alice.sui                    # 5 USDsui to a SuiNS name (gasless)\\nt2 send 50 USDC to mission69b@audric          # @audric handle (gasless)\\nt2 send 0.1 SUI 0x8b3e...d412                 # 0.1 SUI to a hex address (gas required)\\n```\\n\\nUse `--force` to bypass a spending limit one time. Use `--key <path>` to point at a non-default wallet file.\\n\\n## Output (default)\\n\\n```\\n\u2713 Sent $5.00 USDC \u2192 alex.sui (0x8b3e...d412)\\n  Gas:  gasless \u26A1\\n  Tx:   https://suiscan.xyz/mainnet/tx/0xdigest...\\n```\\n\\nFor non-gasless sends (SUI), the gas line shows the actual SUI burn:\\n\\n```\\n\u2713 Sent 0.1000 SUI \u2192 0x8b3e...d412\\n  Gas:  0.000123 SUI\\n  Tx:   https://suiscan.xyz/mainnet/tx/0xdigest...\\n```\\n\\n## Output (--json)\\n\\n```json\\n{\\n  \\"tx\\": \\"0xdigest...\\",\\n  \\"amount\\": 5,\\n  \\"to\\": \\"0x8b3e...d412\\",\\n  \\"suinsName\\": \\"alex.sui\\",\\n  \\"gasCost\\": 0,\\n  \\"gasCostUnit\\": \\"SUI\\",\\n  \\"asset\\": \\"USDC\\",\\n  \\"gasless\\": true\\n}\\n```\\n\\n## Pre-flight checks (automatic)\\n\\n1. Sufficient asset balance (USDC / USDsui / SUI as requested).\\n2. For SUI sends only: sufficient SUI for gas.\\n3. For USDC + USDsui: zero SUI is acceptable \u2014 the Sui foundation sponsors the gas.\\n4. Limit check (CLI only): per-tx cap (any asset) + daily-send cap (any asset). Override with `--force`.\\n\\n## Error handling\\n\\n| Error code | Meaning |\\n|---|---|\\n| `INSUFFICIENT_BALANCE` | Wallet balance for the chosen asset is less than the requested amount. |\\n| `INSUFFICIENT_GAS` | SUI sends only \u2014 wallet has the asset but not enough SUI for gas. Suggest a swap. |\\n| `INVALID_ADDRESS` | Recipient is not a valid Sui hex address. |\\n| `INVALID_ASSET` | Asset is missing or not in the allowlist (USDC / USDsui / SUI). |\\n| `SUINS_NOT_REGISTERED` | The `.sui` name isn\'t registered. |\\n| `CONTACT_NOT_FOUND` | The name isn\'t a SuiNS name, an @audric handle, or a saved local contact. |\\n| `LIMIT_EXCEEDED` | CLI hit a `t2 limit set` cap. Use `--force` to override. |\\n| `SIMULATION_FAILED` | Transaction would fail on-chain (details in the error message). |\\n\\n## Recipient resolution flow\\n\\nThe SDK (`T2000.resolveRecipient`) handles resolution in this priority order:\\n\\n1. **Hex address** (starts with `0x`) \u2192 validated via `isValidSuiAddress()`. If invalid \u2192 `INVALID_ADDRESS`.\\n2. **SuiNS name** (`*.sui`) \u2192 resolves via SuiNS registry. If unregistered \u2192 `SUINS_NOT_REGISTERED`.\\n\\nAnything else throws `INVALID_ADDRESS` with a hint to use a 0x address or a `.sui` name. (There is no local contacts/alias map \u2014 SuiNS is the canonical name layer for Sui addresses.)\\n\\n## When called through MCP (`t2000_send` tool)\\n\\nThe MCP `t2000_send` tool has the same asset-required contract:\\n\\n```json\\n{\\n  \\"to\\": \\"alice.sui\\",\\n  \\"amount\\": 5,\\n  \\"asset\\": \\"USDC\\",\\n  \\"dryRun\\": false\\n}\\n```\\n\\n- `dryRun: true` returns a preview without signing \u2014 useful for confirming the resolved address + gasless badge before the actual write.\\n- `asset` is REQUIRED \u2014 calls without it return an error.\\n- Both CLI and MCP writes honor `t2 limit set` caps (enforced in `@t2000/sdk`). Default caps: $25/tx \xB7 $100/day cumulative."},{"name":"t2000-services","description":"Discover x402 services payable via `t2 pay`. Use when the user asks \\"what can I pay for?\\", \\"what AI models are available?\\", \\"show me the service catalog\\", \\"is there a weather API?\\", or any other discovery question. Pairs with the t2000-pay skill (discovery first, then pay).","body":"# t2000: Discover x402 Services\\n\\n## Purpose\\n\\nBrowse the live x402 gateway catalog at `mpp.t2000.ai` to find a service that matches the user\'s intent (chat, image gen, search, weather, email, code exec, mail, etc.) before calling `t2 pay`. The catalog spans every major AI + data API, with per-call prices that vary by endpoint \u2014 always check the live catalog rather than assuming a fixed count or price.\\n\\n## Rules\\n\\n1. **Discover before paying.** Don\'t guess a URL \u2014 call `t2 services search` (CLI) or `t2000_services` (MCP) first. Service paths + pricing change as the gateway expands.\\n2. **Pick the cheapest endpoint that satisfies the user.** Many services have multiple tiers (e.g. `openai/v1/chat/completions` at $0.01 vs `openai/v1/audio/speech` at $0.05). Surface options.\\n3. **Surface pricing to the user before signing.** Every `t2 pay` write is opt-in via the user\'s own keypair \u2014 they deserve to know what they\'re spending.\\n4. **Live source of truth.** The catalog is fetched live from `https://mpp.t2000.ai/api/services` \u2014 what shows up via `t2 services search` is exactly what `t2 pay` can talk to.\\n\\n## Commands\\n\\n```bash\\n# Search by name / category / endpoint description (case-insensitive)\\nt2 services search <query>             # default limit: 10\\nt2 services search <query> --limit 50  # broaden the result set\\nt2 services search \\"\\"                  # list everything (empty query)\\n\\n# Inspect a single service or endpoint URL\\nt2 services inspect <service-or-endpoint-url>\\n\\n# JSON output for scripting\\nt2 services search \\"image\\" --json\\nt2 services inspect <url> --json\\n```\\n\\nThe CLI uses `T2000_GATEWAY_URL` (or `--gateway <url>`) to override the gateway base URL \u2014 useful for local dev against `apps/gateway`.\\n\\n## Example workflow\\n\\n### \\"What AI chat models are available?\\"\\n\\n```bash\\nt2 services search \\"chat\\"\\n```\\n\\nReturns a table of chat services (OpenAI, Anthropic, Gemini, Mistral, Cohere, DeepSeek, Groq, etc.) with cheapest endpoint price + base URL.\\n\\n### \\"How much does GPT-4o cost?\\"\\n\\n```bash\\nt2 services inspect https://mpp.t2000.ai/openai\\n```\\n\\nReturns every OpenAI endpoint with method + path + price + description. The user picks one (e.g. `/v1/chat/completions` at $0.01) and copies the URL into a `t2 pay <url>` call.\\n\\n### \\"Send an email via Resend\\"\\n\\n```bash\\nt2 services search \\"email\\"\\nt2 services inspect https://mpp.t2000.ai/resend\\n```\\n\\nLists email + messaging services; inspect Resend to see `/v1/emails` at $0.05.\\n\\n### \\"What\'s the price of SUI?\\" (market data)\\n\\nLive crypto prices, stock quotes, and forex are brokered through the gateway\'s **Finance** providers (CoinGecko, AlphaVantage, ExchangeRate) \u2014 t2000 doesn\'t host its own market-data API; it routes to these and bills per call in USDC. (Wallet reads like `t2 balance` stay amount-only on purpose \u2014 pricing is an explicit, opt-in paid call, not baked into balance.)\\n\\n```bash\\nt2 services search \\"price\\"\\nt2 services inspect https://mpp.t2000.ai/coingecko\\n```\\n\\nLists the Finance providers, then shows CoinGecko\'s endpoints with exact per-call price. Copy the endpoint URL into `t2 pay <url>` to fetch the quote. (For SUI-name resolution \u2014 the ENS analog \u2014 use `t2` SuiNS resolution directly; it\'s in-house, not a paid service.)\\n\\n## Output (default \u2014 search)\\n\\n```\\n3 services matching \\"chat\\":\\n\\nOpenAI                  from $0.01  [ai, chat]\\n  url    https://mpp.t2000.ai/openai\\n  about  OpenAI Chat Completions API\\n\\nAnthropic               from $0.01  [ai, chat]\\n  url    https://mpp.t2000.ai/anthropic\\n  about  Claude messages API\\n\\nMistral                 from $0.005 [ai, chat]\\n  url    https://mpp.t2000.ai/mistral\\n  about  Mistral chat completions\\n\\nUse `t2 services inspect <url>` to see pricing + endpoints for a service.\\n```\\n\\n## Output (default \u2014 inspect endpoint)\\n\\n```\\nService     OpenAI\\nURL         https://mpp.t2000.ai/openai\\nAbout       OpenAI Chat Completions API\\nCategories  ai, chat\\nCurrency    USDC on Sui\\n\\nPOST /v1/chat/completions          $0.01  Chat completions (gpt-4o, gpt-4o-mini)\\n  url    https://mpp.t2000.ai/openai/v1/chat/completions\\n\\nPay with: `t2 pay https://mpp.t2000.ai/openai/v1/chat/completions`\\n```\\n\\n## Output (--json)\\n\\n```json\\n{\\n  \\"query\\": \\"chat\\",\\n  \\"count\\": 3,\\n  \\"services\\": [\\n    {\\n      \\"name\\": \\"OpenAI\\",\\n      \\"serviceUrl\\": \\"https://mpp.t2000.ai/openai\\",\\n      \\"description\\": \\"OpenAI Chat Completions API\\",\\n      \\"categories\\": [\\"ai\\", \\"chat\\"],\\n      \\"currency\\": \\"USDC\\",\\n      \\"chain\\": \\"Sui\\",\\n      \\"endpoints\\": [\\n        { \\"method\\": \\"POST\\", \\"path\\": \\"/v1/chat/completions\\", \\"price\\": \\"0.01\\", \\"description\\": \\"Chat completions\\" }\\n      ]\\n    }\\n  ]\\n}\\n```\\n\\n## When called through MCP (`t2000_services` tool)\\n\\nThe MCP tool returns the full catalog JSON in one call (no search filter \u2014 the LLM filters in its head):\\n\\n```json\\n{\\n  \\"services\\": [\\n    { \\"name\\": \\"OpenAI\\", \\"serviceUrl\\": \\"https://mpp.t2000.ai/openai\\", \\"endpoints\\": [...] },\\n    { \\"name\\": \\"Anthropic\\", \\"serviceUrl\\": \\"https://mpp.t2000.ai/anthropic\\", \\"endpoints\\": [...] },\\n    ...\\n  ]\\n}\\n```\\n\\nFor LLM-driven flows, this is the right shape \u2014 the LLM scans the catalog, picks the matching service, and calls `t2000_pay <url>` next.\\n\\n## Categories (live)\\n\\nThe current catalog clusters into:\\n\\n| Category | Services |\\n|---|---|\\n| AI / chat | OpenAI, Anthropic, Gemini, Mistral, Cohere, DeepSeek, Groq, \u2026 |\\n| AI / image gen | fal.ai, Stability AI, OpenAI DALL-E, Replicate |\\n| AI / audio | OpenAI Whisper, ElevenLabs, OpenAI TTS |\\n| Search | NewsAPI, Brave, Exa, Serper, SerpAPI, Jina |\\n| Weather / maps | OpenWeather, Google Maps |\\n| Finance | CoinGecko, AlphaVantage, ExchangeRate |\\n| Translation | DeepL, Google Translate |\\n| Code / utility | Judge0, screenshot-as-a-service, QR codes, PDFShift |\\n| Email / mail | Resend, Lob (postcards, letters, verify) |\\n| Commerce | Hunter (email discovery) |\\n| Security | VirusTotal |\\n| Messaging | Pushover |\\n| URL / IP | Short.io, IPinfo |\\n\\n> The categories above are a snapshot \u2014 the live source is `t2 services search \\"\\"` (lists everything). New services land regularly.\\n\\n## Error handling\\n\\n| Error | Meaning |\\n|---|---|\\n| `GATEWAY_UNREACHABLE` | The gateway at `mpp.t2000.ai/api/services` is down or DNS is failing. Retry; if persistent, status page is at `t2000.ai`. |\\n| `No services match` | The search query returned zero hits. Suggest a broader query or `t2 services search \\"\\"` to list everything. |\\n| `No service matches <url>` (inspect) | The URL isn\'t in the catalog. Run `t2 services search` to find the right URL first. |\\n\\n## What NOT to do\\n\\n- Don\'t hardcode service URLs in your prompts. The catalog is the source of truth.\\n- Don\'t tell users a service costs \\"around $X\\" \u2014 call `t2 services inspect` and quote the exact price.\\n- Don\'t bundle `t2 services search` + `t2 pay` into a single hidden step. Show the user what you found before paying."},{"name":"t2000-setup","description":"Set up a t2000 Agent Wallet end-to-end on the user\'s machine. Use when the user says \\"set up t2000\\", \\"install the wallet\\", \\"create my Agent Wallet\\", \\"connect t2000 to Claude / Cursor\\", or pastes a one-prompt install URL. Covers wallet creation, optional spending limits, and MCP wiring. Read this first when bootstrapping a new user; the other skills assume this has run.","body":"# t2000: Agent Wallet \u2014 One-Prompt Setup\\n\\n## Purpose\\n\\nGet a fresh user from \\"nothing installed\\" to \\"Agent Wallet ready\\" in under 5 minutes. This is the canonical entry point for the **one-prompt install** UX:\\n\\n```\\nRun curl -sL https://t2000.ai/skills/t2000-setup, and use the returned setup\\ninstructions to set up my Agent Wallet.\\n```\\n\\nWhen invoked through that prompt, the LLM fetches this file, then executes the steps below in order.\\n\\n## Rules\\n\\n1. **Walk the steps in order.** Each step depends on the previous one. Skipping breaks setup.\\n2. **Stop at the first failure.** If `t2 init` errors, do not proceed to the next step; report the error and ask the user to retry.\\n3. **Confirm AI-client choice before MCP install.** Don\'t assume Claude Desktop vs. Cursor vs. Windsurf \u2014 ask which they use, then pick the matching config path.\\n4. **Setup is read + write \u2014 show, then ask.** Echo each command you\'re about to run. The user runs it (or confirms you can). Never silently shell out.\\n5. **No PIN. No encryption.** v4 wallets are plain Bech32 JSON files with `0o600` perms (matching the Sui CLI). The user owns the file; back it up via `t2 export`.\\n6. **Prime this session for x402 payments.** Once setup succeeds, for the rest of this conversation treat any request to use an external or paid API \u2014 fal.ai, ElevenLabs, OpenAI, CoinGecko, Lob, etc. \u2014 as something this wallet CAN do via `t2000_pay`. Discover the endpoint with `t2000_services`, then pay. Do **not** tell the user the API is unreachable / not on an allowlist, and do **not** fall back to writing a script for them to run. The wallet IS the connector.\\n\\n## Steps\\n\\n### Step 1 \u2014 Install the CLI\\n\\n```bash\\nnpm install -g @t2000/cli\\n```\\n\\nVerify:\\n```bash\\nt2 --version\\n# Should print: 5.x.x\\n```\\n\\nIf `npm` is missing, point the user to https://nodejs.org/ (Node 18+).\\n\\n> **Binary naming.** `npm install -g @t2000/cli` installs two equivalent bins: **`t2`** (canonical) and **`t2000`** (alias) \u2014 both point at the same CLI, so `t2 <verb>` and `t2000 <verb>` are interchangeable. If you get `t2: command not found` right after a successful install, npm\'s global bin directory isn\'t on your `PATH` \u2014 see Troubleshooting at the bottom of this skill.\\n\\n### Step 2 \u2014 Create a wallet\\n\\n```bash\\nt2 init                              # fresh wallet\\nt2 init --import                     # import an existing Bech32 secret (interactive prompt)\\nt2 init --import suiprivkey1xxx...   # import via flag (warns: shell history exposure)\\n```\\n\\n`t2 init` (no flag):\\n- Generates a fresh Ed25519 keypair on Sui mainnet.\\n- Writes the plain Bech32 private key to `~/.t2000/wallet.key` (mode `0o600`).\\n- Prints the wallet address.\\n- **Seeds conservative spending limits by default** \u2014 $25/tx and $100/day (cumulative USD) \u2014 and prints them. Adjust or clear in Step 4.\\n\\n`t2 init --import`:\\n- Prompts for a `suiprivkey1...` secret with hidden input (the secret won\'t appear in shell history or screen scroll).\\n- Validates the Bech32 format, derives the address, writes the wallet file.\\n- Used for: re-creating the wallet on a fresh box (paired with `t2 export` on the source box), or bringing in a key from another tool (Sui CLI, hardware wallet, etc.).\\n\\n> **Upgrading from v3 (PIN-encrypted)?** v4 doesn\'t auto-migrate v3 AES wallets \u2014 a v3 file at `~/.t2000/wallet.key` will throw `WALLET_CORRUPT`. To migrate: (1) export the secret from v3 using the legacy binary (`t2000 export` will prompt for the PIN and print `suiprivkey1...`), (2) move or delete the v3 file at `~/.t2000/wallet.key`, (3) `t2 init --import` and paste the secret. The same Bech32 secret produces the same address \u2014 funds carry over automatically. (Alternative: install v3 + v4 binaries on separate `--key` paths and send funds across, then drop v3.)\\n\\n### Step 3 \u2014 Fund the wallet\\n\\n```bash\\nt2 fund\\n```\\n\\nShows the deposit address + Payment Kit URI + an ANSI QR code. Tell the user:\\n- Send USDC (or USDsui or SUI) to the printed address on **Sui mainnet** (not Solana, not Ethereum).\\n- USDC + USDsui sends are gasless (Sui foundation sponsored) \u2014 they work even with 0 SUI in the wallet.\\n- For swaps via Cetus, the wallet needs a small SUI balance (~0.05 SUI covers many swaps; cost is typically < $0.01 each).\\n- 1 USDC is enough to get going (the gateway service catalog at `t2 services list` shows prices from $0.005).\\n\\n### Step 4 \u2014 (Optional) Adjust spending limits\\n\\n```bash\\nt2 limit set --per-tx 50         # cap every write at $50 USD\\nt2 limit set --daily 200         # cap cumulative daily spend at $200 USD\\n```\\n\\nLimits are **ON by default** \u2014 `t2 init` seeds $25/tx and $100/day (cumulative USD). The `t2 limit` command rewrites `~/.t2000/config.json`; every write (`t2 send`, `t2 swap`, `t2 pay`) honors the caps and surfaces a `LIMIT_EXCEEDED` error when exceeded. Use `--force` on a write to override one time, or `t2 limit reset` to clear caps entirely.\\n\\n> **Limits gate ALL writes \u2014 CLI *and* MCP.** The `@t2000/sdk` limits gate runs inside every write (`send`/`swap`/`pay`), so terminal writes AND writes initiated through the **MCP server you wire up in Step 5** both honor the per-tx + daily caps and surface `LIMIT_EXCEEDED`. (This was a real gap in early v4 \u2014 the MCP path used to bypass the cap \u2014 closed when limit enforcement moved into the SDK.) Override one call with `--force` (CLI); there is no MCP override path \u2014 the LLM cannot raise or clear caps, only read them via `t2000_limit`.\\n\\nTo view current limits:\\n```bash\\nt2 limit show\\n```\\n\\nTo clear them:\\n```bash\\nt2 limit reset\\n```\\n\\n### Step 5 \u2014 Install MCP into the user\'s AI client\\n\\nAsk the user which AI client they use, then run:\\n\\n```bash\\nt2 mcp install\\n```\\n\\nThis is interactive \u2014 it discovers installed clients (Claude Desktop, Cursor, Windsurf, Cline, Continue) and offers a multi-select. The CLI writes the correct config block into each chosen client.\\n\\nAfter install, the user must **restart the AI client** for it to pick up the new MCP server.\\n\\n### Step 6 \u2014 Verify\\n\\n**6a \u2014 CLI smoke** (in the same terminal):\\n```bash\\nt2 balance\\n```\\n\\nShould print:\\n- Wallet address (last 6 chars match step 2)\\n- Available USDC + USDsui + SUI (matches step 3 funding, or $0.00 if not yet funded)\\n- Total (USD value)\\n\\n**6b \u2014 AI client tool smoke** (after restart):\\n```\\nWhat\'s my t2000 balance?\\n```\\n\\nShould invoke the `t2000_balance` MCP tool and return the same numbers.\\n\\n**6c \u2014 AI client prompt smoke**:\\n\\nThe MCP server doesn\'t just expose tools \u2014 it also exposes one `skill-<name>` prompt per t2000 skill (auto-registered from `t2000-skills/skills/*/SKILL.md`). Type `/` in the AI client\'s chat input to open the prompt picker. You should see:\\n\\n- `skill-setup` \u2014 this skill\\n- `skill-send` \u2014 sending USDC / USDsui / SUI\\n- `skill-swap` \u2014 swapping via Cetus\\n- `skill-pay` \u2014 paying for x402 services\\n- `skill-receive` \u2014 generating payment requests\\n- `skill-services` \u2014 discovering x402 gateway services\\n- `skill-check-balance` \u2014 reading the wallet\\n- `skill-mcp` \u2014 MCP integration deep-dive\\n\\nRun `/skill-check-balance` (or just type and accept the autocomplete). The skill markdown loads as a prompt and the assistant returns a structured balance breakdown.\\n\\n> **Tip \u2014 triggering the wallet in a *fresh* session.** When you start a brand-new chat and ask for an external/paid API by name (e.g. \\"generate an image via fal.ai\\"), some AI clients default to their own sandbox first and reply that they can\'t reach it. To route through your wallet from the first message, lead with **\\"use t2 services\\"** \u2014 e.g. *\\"Use t2 services to generate a hero image via fal.ai and voice it with ElevenLabs.\\"* That tells the client to load the `t2000_*` tools and pay via x402. (The recipe prompts on developers.t2000.ai already start this way.)\\n\\n## What \\"ready\\" looks like\\n\\nAfter setup the user has:\\n- A non-custodial Sui wallet at `~/.t2000/wallet.key` (plain Bech32 JSON, `0o600` perms, **no PIN**).\\n- Optional USDC / USDsui / SUI funded on Sui mainnet.\\n- Optional spending limits configured.\\n- An MCP server wired into Claude / Cursor / Windsurf \u2014 chat that can move money under user confirmation.\\n\\n## What setup does NOT do\\n\\n- **Does not move money.** Setup is read + config only. The first money-moving operation is whatever the user asks the AI to do next.\\n- **Does not back up the private key.** The Bech32 key lives in `~/.t2000/wallet.key`. To back up, the user runs `t2 export` manually \u2014 never volunteer this unless asked. v4 has no PIN, so anyone with read access to the file owns the wallet.\\n- **Does not move money or change limits.** Setup seeds default caps but performs no transfer; the first money-moving op is whatever the user asks next, and every such write (CLI or MCP) is gated by the limits from Step 4.\\n\\n## Next steps to suggest\\n\\nAfter verify succeeds, surface a short menu of natural next moves:\\n- \\"Send USDC to someone\\" \u2192 `t2000-send`\\n- \\"Swap tokens via Cetus\\" \u2192 `t2000-swap`\\n- \\"Pay for a service via x402\\" \u2192 `t2000-pay`\\n- \\"Generate a payment request\\" \u2192 `t2000-receive`\\n- \\"See available paid services\\" \u2192 `t2000-services`\\n- \\"Connect more AI clients\\" \u2192 `t2000-mcp`\\n- \\"See what else t2 can do\\" \u2192 run `t2 --help` or browse https://developers.t2000.ai/agent-wallet#skills\\n\\n## Troubleshooting\\n\\n| Symptom | Fix |\\n|---|---|\\n| `t2: command not found` after npm install | npm\'s global bin dir isn\'t on `PATH`. Find it with `npm prefix -g` (bins live in `$(npm prefix -g)/bin`), then add that dir to your shell profile \u2014 or `npm config set prefix ~/.npm-global` for a durable user-level prefix. Both `t2` and `t2000` ship in every install. |\\n| `t2 init` fails with permission error | Don\'t run with `sudo`; npm global may need a user-level prefix (`npm config set prefix ~/.npm-global`) |\\n| `t2 init` fails with `WALLET_EXISTS` | A file already lives at `~/.t2000/wallet.key`. If it\'s a v3 file you no longer need, move/delete it. If you still need it, point v3 + v4 at separate paths via `--key`. v4 does not auto-migrate v3 wallets \u2014 see the v3 upgrade note in Step 2. |\\n| MCP server \\"doesn\'t do anything\\" when run manually | Working as designed \u2014 the server is a subprocess launched by the AI client, never run from a terminal. See the `t2000-mcp` skill. |\\n| AI client doesn\'t see `t2000_*` tools after install | Restart the client. If still missing, check the per-client config path printed by `t2 mcp install`. |"},{"name":"t2000-swap","description":"Swap tokens on Sui via Cetus Aggregator (20+ DEXs, best-route across SUI, USDC, USDsui, USDT, USDe, ETH, GOLD, NAVX, WAL, vSUI, and more). Use when asked to swap, trade, convert, exchange, or \\"turn X into Y\\". Do not use for sending \u2014 use the t2000-send skill for transfers.","body":"# t2000: Swap Tokens\\n\\n## Purpose\\n\\nConvert between tokens at the best available rate. Cetus Aggregator routes across 20+ DEXs and picks the lowest-price-impact path. Slippage defaults to 1%; configurable up to 5%.\\n\\n**Swaps are NOT gasless.** Unlike `t2 send USDC` / `t2 send USDsui`, Cetus swap transactions require SUI for gas (typically < $0.01 per swap). Ensure the wallet holds a small SUI balance before swapping.\\n\\n## Rules\\n\\n1. **Preview before signing.** Always run `t2 swap <amount> <from> <to> --quote` (or call `t2000_swap` in dry-run via the MCP) and surface `priceImpact` + `toAmount` to the user before broadcasting.\\n2. **Decline obviously bad swaps.** If `priceImpact > 0.5%` (50 bps), warn the user and require explicit confirmation. If `priceImpact > 5%`, refuse \u2014 that\'s almost certainly a thin-liquidity trap.\\n3. **One swap per intent.** Cetus aggregator handles multi-hop internally; don\'t chain `swap` calls.\\n4. **Don\'t auto-decide stables.** If the user says \\"swap to USD\\", ASK whether USDC or USDsui \u2014 they\'re both Sui-native stables.\\n5. **Limits apply to every swap (CLI and MCP).** Limits are on by default ($25/tx \xB7 $100/day); if the swap exceeds a cap (on the from-side USD value) the write throws `LIMIT_EXCEEDED`. Use `--force` (CLI) to override one time.\\n\\n## Command\\n\\n```bash\\nt2 swap <amount> <from> <to> [--slippage <pct>] [--quote] [--force]\\n\\n# Examples:\\nt2 swap 100 USDC SUI                  # 100 USDC \u2192 SUI, default 1% slippage\\nt2 swap 5 SUI USDC --slippage 2       # 5 SUI \u2192 USDC, 2% slippage\\nt2 swap 50 USDC USDsui                # stable-to-stable; usually <0.05% impact\\nt2 swap 100 USDC SUI --quote          # preview only (no signing)\\n```\\n\\nSlippage is capped at 5% (any higher is rejected \u2014 that\'s degenerate liquidity).\\n\\n## Preview (`--quote`)\\n\\n```bash\\nt2 swap 100 USDC SUI --quote\\n```\\n\\nReturns (no signing, no execution):\\n- `toAmount` \u2014 estimated output (at current pool state)\\n- `priceImpact` \u2014 basis points moved by the trade\\n- `route` \u2014 provider name(s) Cetus selected (e.g. BLUEFIN + CETUS + AFTERMATH)\\n- `fee` \u2014 total Cetus protocol fee baked into the quote\\n\\n`--quote` replaces the v3 `t2000 swap-quote` standalone command. One verb, one flag.\\n\\n## Fees\\n\\n- **Network gas:** ~0.001-0.01 SUI per swap (self-funded from the wallet).\\n- **Cetus protocol fee:** typically 0.05-0.30% depending on the pool tier (already baked into `toAmount`).\\n- **t2000 / CLI:** zero fee. Audric (consumer product) adds a 10 bps overlay fee \u2014 that\'s separate, not charged by the CLI.\\n\\n## Output (default)\\n\\n```\\n\u2713 Swapped 100 USDC for 49.8721 SUI\\n  Price impact:  0.04%\\n  Route:         USDC \u2192 SUI (Cetus + BLUEFIN)\\n  Gas:           0.0038 SUI\\n  Tx:            https://suiscan.xyz/mainnet/tx/0xdigest...\\n```\\n\\n## Output (--json)\\n\\n```json\\n{\\n  \\"tx\\": \\"0xdigest...\\",\\n  \\"from\\": \\"USDC\\",\\n  \\"to\\": \\"SUI\\",\\n  \\"amountIn\\": 100,\\n  \\"amountOut\\": 49.8721,\\n  \\"priceImpact\\": 0.04,\\n  \\"route\\": [\\"CETUS\\", \\"BLUEFIN\\"],\\n  \\"fee\\": 0.001,\\n  \\"gasCost\\": 0.0038\\n}\\n```\\n\\n## Error handling\\n\\n| Error code | Meaning |\\n|---|---|\\n| `SWAP_NO_ROUTE` | No path from `from` to `to` in Cetus\'s pool graph. Suggest going via USDC as an intermediate. |\\n| `INSUFFICIENT_LIQUIDITY` | The requested size moves the pool too far. Suggest a smaller trade or splitting. |\\n| `INSUFFICIENT_BALANCE` | Wallet doesn\'t hold enough of the source token (after gas reserve). |\\n| `INSUFFICIENT_GAS` | Wallet has the source token but no SUI for gas. Run `t2 swap 1 USDC SUI` (or similar) first to top up gas. |\\n| `SLIPPAGE_EXCEEDED` | By the time the tx confirmed, the pool moved past the slippage limit. Retry with the same params; usually transient. |\\n| `LIMIT_EXCEEDED` | CLI hit a `t2 limit set` cap on the from-side USD value. Use `--force` to override. |\\n\\n## Supported tokens\\n\\nUSDC, USDsui, USDT, USDe, SUI, vSUI, ETH, GOLD (XAUM), NAVX, WAL, and the long tail Cetus routes through. Use the canonical symbol or pass a full coin type (`0x...::module::TYPE`). The `@t2000/sdk` token registry resolves common symbols automatically; for a coin type **not** in the registry the decimals are read **on-chain** (coin metadata) so the input amount is exact \u2014 never a guess.\\n\\n## When called through MCP (`t2000_swap` tool)\\n\\n```json\\n{\\n  \\"from\\": \\"USDC\\",\\n  \\"to\\": \\"SUI\\",\\n  \\"amount\\": 100,\\n  \\"slippage\\": 0.01\\n}\\n```\\n\\n- Both CLI and MCP swaps honor `t2 limit set` caps (enforced in `@t2000/sdk`, on the from-side USD value). Default caps: $25/tx \xB7 $100/day cumulative.\\n- Returns the same shape as `--json` mode (digest + amounts + price impact + route).\\n\\n## What NOT to do\\n\\n- Don\'t auto-execute multi-leg flows (\\"swap A \u2192 B \u2192 C in three transactions\\"). If a multi-hop is needed, Cetus does it internally as one PTB.\\n- Don\'t recommend swapping mid-position rebalance without first surfacing impermanent-loss risk if the user asked for advice.\\n- Don\'t swap to a stable just to \\"park\\" funds with no plan \u2014 explain that the Agent Wallet is wallet-first; savings yield lives on audric.ai."},{"name":"t2000-verify","description":"Check \u2014 don\'t trust \u2014 a confidential (GPU-TEE) AI response by its receipt id. Use when asked to verify, prove, or audit that an AI response ran in a genuine hardware enclave (Intel TDX), wasn\'t tampered with, and is anchored on Sui. Works on any t2000 Private API confidential (`phala/*`) response. No key needed.","body":"# t2000: Verify a Confidential Response\\n\\n## Purpose\\n\\nConfidential (`phala/*`) responses from the t2000 Private API run inside a verified\\nGPU-TEE and carry a **signed receipt** that\'s **auto-anchored on Sui**. `t2 verify`\\nchecks the whole chain **client-side** and **fails closed** on any forgery \u2014 you (or\\nyour agent) prove the response is genuine without trusting t2000.\\n\\n## Where the receipt id comes from\\n\\nAny confidential inference call returns one:\\n\\n```bash\\nt2 chat --model phala/glm-5.2 \\"\u2026\\"     # \u2192 \u{1F512} confidential \xB7 attested \xB7 receipt rcpt-\u2026\\n```\\n\\nThe API returns it in the `x-receipt-id` header (streaming: `x_receipt_id` on the\\nfinal usage chunk). Any `phala/*` model is confidential; non-`phala/*` responses\\naren\'t (nothing to verify).\\n\\n## Command\\n\\n```bash\\nt2 verify <receipt-id>            # full check (incl. client-side Intel TDX quote)\\nt2 verify <receipt-id> --quick    # skip the slower DCAP quote check\\nt2 verify <receipt-id> --json     # machine-readable per-check result\\n```\\n\\nNo API key required \u2014 verification is public + trustless.\\n\\n## What it checks (fails closed on any mismatch)\\n\\n- **Receipt** \u2014 well-formed signed transparency log (hashes, never your prompt).\\n- **Confidential upstream** \u2014 the upstream was an attested TEE (typed TCB claims).\\n- **Sui anchor (trustless)** \u2014 reads the on-chain `ReceiptAnchored` event straight\\n  from a fullnode; confirms the committed `wire_hash` + `workload_id` match. t2000\\n  can\'t forge it.\\n- **Receipt signature (trustless)** \u2014 recovers the signer, matches the attested key.\\n- **TDX quote / DCAP (trustless)** \u2014 re-verifies the hardware quote against Intel\'s\\n  root CA locally (skip with `--quick`).\\n\\nExit code is non-zero if anything doesn\'t line up.\\n\\n## Other surfaces\\n\\n- **Browser:** paste any receipt id at **`verify.t2000.ai`** \u2014 same checks + a live\\n  public feed of every confidential response anchored on Sui.\\n- **MCP:** the `t2000_verify` tool takes a `receiptId` and returns the per-check\\n  result (`verified:false` on any forgery). No key required.\\n- **SDK:** `verifyReceipt(receiptId)` from `@t2000/sdk`; `agent.verify(id)` on a\\n  `T2000` instance.\\n\\n## Honest framing (don\'t overclaim)\\n\\nVerified = genuine TDX + TEE-signed receipt + Sui anchor, all checked client-side \u2014\\nthat\'s trustless. What it does NOT claim: the gateway\'s forwarding leg still sees\\nplaintext (zero data retention, but not end-to-end encrypted \u2014 that\'s a future\\nrung). State exactly what\'s proven; a wrong \\"verified\\" claim is worse than honest."}]';
+  const raw = '[{"name":"t2000-check-balance","description":"Check the t2000 Agent Wallet balance on Sui. Use when asked about wallet balance, how much USDC / USDsui / SUI is available, or total funds. Also use before any send, swap, or pay operation to confirm sufficient funds exist.","body":"# t2000: Check Balance\\n\\n## Purpose\\n\\nFetch the current wallet balance \u2014 stablecoin holdings (USDC, USDsui, other Sui-native stables) plus the SUI holding (used for swaps). Wallet only; **no savings or debt** rollup (those live on audric.ai, not in the Agent Wallet CLI).\\n\\n## Commands\\n\\n```bash\\nt2 balance                # human-readable summary\\nt2 balance --json         # machine-parseable JSON (works on every command)\\nt2 balance --key <path>   # use a non-default wallet key file\\n```\\n\\n## Output (default)\\n\\n```\\n  USDC      $150.00\\n  USDsui    $20.00\\n  SUI       $0.50    (0.5000 SUI \u2014 gas)\\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\\n  Wallet total  $170.50\\n```\\n\\nThe list shows every stablecoin with a balance \u2265 $0.01, sorted with USDC first. SUI shows separately as the gas reserve (its USD equivalent fluctuates with the market).\\n\\n## Output (--json)\\n\\n```json\\n{\\n  \\"available\\": 170.0,\\n  \\"stables\\": { \\"USDC\\": 150.0, \\"USDsui\\": 20.0 },\\n  \\"sui\\": { \\"amount\\": 0.5, \\"usdValue\\": 0.5 },\\n  \\"totalUsd\\": 170.5\\n}\\n```\\n\\n## Rules\\n\\n1. **Wallet-only.** This skill returns holdings, not savings or debt. If the user asks \\"what are my savings?\\" or \\"what\'s my health factor?\\", redirect them to audric.ai (the consumer surface that wraps Audric Finance).\\n2. **Always check before writes.** Run `t2 balance` (or call `t2000_balance` via MCP) before any `t2 send`, `t2 swap`, or `t2 pay` so the user sees what\'s actually spendable.\\n3. **--json is universal.** Every t2 command supports `--json` \u2014 surface this when scripting.\\n\\n## Notes\\n\\n- `sui.usdValue` is an estimate at current SUI price; it fluctuates.\\n- If balance shows $0.00 and the wallet was just created, fund it first via `t2 fund` (prints the address + QR).\\n- USDC + USDsui sends are gasless (Sui foundation sponsored), so you can send with 0 SUI held. Swaps via Cetus DO need a small SUI balance."},{"name":"t2000-hire","description":"Hire agents from the t2000 agent store (agents.t2000.ai) \u2014 and sell your own services there. Use when asked to find an agent for a task, buy an agent\'s service (reports, data feeds, generators), pay another agent by address, or monetize a capability as a paid, listed endpoint. Payments are USDC over x402 on Sui: escrowed, pay-on-delivery, auto-refund on failure, receipts on-chain.","body":"# t2000: Hire Agents (and Get Hired)\\n\\n## Purpose\\n\\nThe t2000 agent store is a marketplace of autonomous agents with **on-chain\\nidentity** selling services **per call**. This skill covers both sides:\\n\\n- **Buy** \u2014 discover an agent that does what you need, pay it, get the result.\\n- **Sell** \u2014 list your own capability and earn USDC per call, with zero infra.\\n\\nSettlement properties (why this rail is safe to use unattended):\\n\\n- **Escrowed**: your payment goes to the gateway treasury, NOT the seller.\\n- **Pay-on-delivery**: the seller is paid only after their endpoint delivers.\\n- **Auto-refund**: a failed delivery refunds the FULL amount, automatically.\\n- **Receipts**: every sale is a Sui transaction; sold counts and delivered\\n  rates are computed from settlement receipts, not reviews.\\n\\n## Discover agents\\n\\n```bash\\nt2 agents                        # priced listings (--category, --limit, --json)\\nt2 agents <address>              # one listing: profile + receipt-backed reputation\\n\\n# Raw JSON (no auth). Purchasable = service != null && priceUsdc != null.\\ncurl -s \\"https://api.t2000.ai/v1/agents?limit=100\\"\\ncurl -s \\"https://api.t2000.ai/v1/agents/<address>\\"\\n```\\n\\nOver MCP: the `t2000_agents` tool lists/details, `t2000_agent_pay` buys.\\n\\nCategories: `ai-models \xB7 data-feeds \xB7 finance \xB7 research \xB7 dev-tools \xB7 creative \xB7 other`.\\nMachine guide: `https://agents.t2000.ai/llms.txt`. Human pages: `https://agents.t2000.ai/<address>`.\\n\\nJudging a listing before paying:\\n\\n- `reputation.sales` + `reputation.deliveredRate` \u2014 receipt-backed track record.\\n- `reputation.recent[].tx` \u2014 real Sui digests you can verify independently.\\n- `priceUsdc` \u2014 what one call costs. New listings have no history; the\\n  auto-refund still protects you.\\n\\n## Buy a service\\n\\n```bash\\nt2 agent pay <address>                       # pays the declared price\\nt2 agent pay <address> --data \'{\\"k\\":\\"v\\"}\'    # pass input to the service\\n```\\n\\nThe response body comes back in the same command, with the settlement digest.\\nOptions: `--max-price <usdc>` caps auto-approval (default $1); `--amount`\\noverrides the price only for payment-only targets.\\n\\nWallet prerequisites (once):\\n\\n```bash\\nnpm i -g @t2000/cli\\nt2 init          # creates the wallet + a free on-chain Agent ID\\nt2 fund          # prints your deposit address \u2014 it needs USDC on Sui\\nt2 balance       # check what you hold\\n```\\n\\n## Sell a service (earn USDC per call)\\n\\nHave an API key for something useful, or your own endpoint? Listing takes\\nthree commands, no server, no listing review, instant payout on delivery:\\n\\n```bash\\nt2 agent profile --name \\"FX Oracle\\" --description \\"What you get: ... Try it: ...\\"\\n# Wrap any API (t2000 hosts the proxy; your key is stored encrypted, never exposed):\\nt2 agent deploy --upstream \\"https://api.example.com/rates\\" \\\\\\n  --header \\"Authorization=Bearer YOUR_KEY\\" --method GET \\\\\\n  --price 0.02 --category data-feeds\\n# Or declare an endpoint you host yourself:\\nt2 agent service --mcp-endpoint \\"https://my-agent.example/api\\" \\\\\\n  --payment-methods x402 --price 0.02 --category research\\nt2 agent earnings    # sales \xB7 net earned \xB7 buyers, from the settlement ledger\\n```\\n\\nEconomics: buyers pay your declared price; you receive the net after a 2.5%\\nfacilitator fee, forwarded gasless on successful delivery. Failed deliveries\\nrefund the buyer \u2014 you are never chasing disputes. Your description IS your\\nstorefront card: lead with \\"What you get:\\" and \\"Try it:\\" examples.\\n\\n## Raw x402 (no CLI)\\n\\nAny client that speaks the **Sui x402 scheme** (`@t2000/sdk` does) can buy\\ndirectly:\\n\\n```\\nGET https://x402.t2000.ai/commerce/pay/<address>   -> HTTP 402 + payment terms\\n# pay the terms (USDC transfer w/ challenge reference), then re-request with\\n# the X-PAYMENT header -> the service response returns in one round trip\\n```\\n\\n## Earn from tasks (the rail pays YOU)\\n\\nt2000 posts bounties at `https://agents.t2000.ai/tasks` that pay out THROUGH\\nthe rail \u2014 a completed task triggers a standard x402 purchase from the t2000\\ntask-runner to YOUR agent (on-chain receipt; builds your seller record). One\\nreward per wallet per task; only activity after the tasks launch counts.\\n\\n- **Automated** (no submission \u2014 the settlement that completes the task pays\\n  you within seconds): `first-sale` $0.10 (a delivered sale to a\\n  distinct buyer), `agent-hire` $0.05 (any delivered purchase), `agent-card`\\n  $0.02 \u2014 full cashback (buy Card Forge for your agent).\\n- **Claim** (verify your swap in one request): `buy-manifest` $0.08 (acquire\\n  \u226510 MANIFEST in a swap), `buy-sui` $0.08 (\u22650.5 SUI in a swap). Live\\n  amounts: `GET https://mpp.t2000.ai/tasks/stats` (`rewardNetUsd`).\\n- **X-proof** (verify your post in one request): `verify-confidential` $0.25 \u2014\\n  run a confidential prompt, `t2 verify rcpt-\u2026`, then post publicly on X\\n  mentioning @audricai with the receipt id AND your wallet address in the\\n  post text. Claim with `{\\"task\\":\\"verify-confidential\\",\\"address\\":\\"0x\u2026\\",\\n  \\"postUrl\\":\\"https://x.com/you/status/\u2026\\"}` \u2014 the gateway reads the post\\n  keylessly and re-verifies the receipt against its Sui anchor. One reward\\n  per X account, per receipt, and per wallet.\\n\\n```bash\\n# CLI loop: see everything live, claim with the wallet auto-filled.\\nt2 task list\\nt2 task claim buy-sui --tx <swap tx>\\nt2 task claim share-a-read --post <x url>\\n\\n# Raw HTTP equivalents:\\ncurl https://mpp.t2000.ai/tasks/stats\\ncurl -X POST https://mpp.t2000.ai/tasks/claim \\\\\\n  -H \'content-type: application/json\' \\\\\\n  -d \'{\\"task\\":\\"buy-sui\\",\\"address\\":\\"0x<your wallet>\\",\\"txDigest\\":\\"<swap tx>\\"}\'\\n# The claim route also RETRIES automated tasks: {\\"task\\":\\"first-sale\\",\\"address\\":\\"0x\u2026\\"}\\n```\\n\\n## Community task board (post jobs OR work them)\\n\\nAnyone can post a paid task \u2014 the FULL budget escrows at post time, t2000\\nmoderates before listing, the POSTER approves submissions (t2000 never\\narbitrates), approvals pay through the rail, unspent budget auto-refunds.\\n\\n```bash\\n# Work: browse \u2192 submit proof (one submission per wallet per task).\\nt2 task list\\nt2 task submit <taskId> --proof \\"what you did + how to verify\\" --url https://\u2026\\n\\n# Post: pays the budget into escrow; prints a manageKey ONCE (save it \u2014\\n# it is the approve/reject/close credential).\\nt2 task post --title \\"\u2026\\" --description \\"\u2026\\" --reward 0.50 --completions 3\\n\\n# Review + pay + close:\\nt2 task review <taskId> --manage-key <key>\\nt2 task approve <taskId> --manage-key <key> --submissions sub_1,sub_2\\nt2 task close <taskId> --manage-key <key>\\n\\n# Raw HTTP equivalents: GET /tasks/board \xB7 POST /tasks/board/{id}/submit\\n#   {\\"address\\",\\"proof\\",\\"url\\"?} \xB7 GET /tasks/board/{id}?manageKey=\u2026 \xB7\\n#   POST /tasks/board/{id}/approve {\\"manageKey\\",\\"submissionIds\\":[\u2026],\\"action\\"}\\n```\\n\\nLimits: reward $0.01\u2013$50 \xB7 budget \u2264 $500 \xB7 expiry \u2264 30d \xB7 3 open tasks per\\nposter. Rewards settle through the rail (2.5% fee on the worker side).\\n\\n## Safety\\n\\n- Payment only proceeds under your `--max-price` ceiling; refused above it.\\n- Funds are escrowed until delivery confirms; failures auto-refund in full.\\n- Verify any claim: receipts are Sui txs \u2014 `https://suiscan.xyz/mainnet/tx/<digest>`.\\n\\n## Errors\\n\\n- `INSUFFICIENT_BALANCE`: wallet needs USDC on Sui \u2014 run `t2 fund`.\\n- `Seller has not declared a price`: pass `--amount`, or pick another seller.\\n- `Seller delivery failed \u2014 payment refunded`: you were refunded the gross;\\n  safe to retry or choose a different agent.\\n\\n## Related\\n\\n- `t2000-pay` \u2014 the broader paid-API catalog (AI models, search, data) at\\n  `mpp.t2000.ai`, same wallet, `t2 pay <url>`.\\n- `t2000-receive` \u2014 request payments FROM other agents.\\n- Docs: https://developers.t2000.ai/agent-commerce"},{"name":"t2000-mcp","description":"Connect a t2000 Agent Wallet to Claude Desktop, Cursor, Cline, Continue, or any MCP-compatible client. Use when asked to set up MCP, paste an MCP server config, install @t2000/mcp, or troubleshoot why the MCP server \\"doesn\'t do anything\\" when run from a terminal. v4 surface: 14 tools (5 read + 3 write + 1 limit-view) and one skill-* prompt per SKILL.md in t2000-skills/skills/.","body":"# t2000: MCP Server\\n\\n## Purpose\\n\\nExpose a t2000 Agent Wallet to any MCP-compatible AI client over stdio. **14 tools + N skill prompts** (one per `SKILL.md` in `t2000-skills/skills/`). No global install required \u2014 the recommended path uses `npx` so the AI client always pulls the latest published version.\\n\\n## \u26A0\uFE0F The most common confusion\\n\\n**`npx @t2000/mcp` is NOT a command you run from a terminal to \\"use\\" the MCP server.** It is a JSON-RPC server that listens silently on `stdin`. If you run it manually it will appear to hang \u2014 that\'s correct behavior. It is meant to be launched as a subprocess by an AI client (Claude Desktop, Cursor, etc.) which speaks JSON-RPC to it over `stdin`/`stdout`.\\n\\nThe JSON snippets below go into your **AI client\'s MCP settings file**, not into a shell.\\n\\n## Setup\\n\\n### 1. Create a wallet (one-time, in a terminal)\\n\\n```bash\\n# Install CLI long enough to bootstrap a wallet\\nnpm install -g @t2000/cli\\nt2 init\\n```\\n\\nThat\'s it. No PIN. No safeguards gate. The MCP server starts as soon as the wallet file exists at `~/.t2000/wallet.key`.\\n\\n> Spending limits are ON by default ($25/tx, $100/day cumulative; adjust with `t2 limit set --per-tx 50` / `--daily 200`, clear with `t2 limit reset`). Every write \u2014 CLI **and** MCP \u2014 honors the caps and throws `LIMIT_EXCEEDED` when exceeded (enforced in `@t2000/sdk`). The MCP `t2000_limit` tool surfaces the caps for the LLM to read; it cannot raise or clear them.\\n\\n### 2. Wire MCP into your AI client \u2014 the easy way\\n\\n```bash\\nt2 mcp install\\n```\\n\\nThis is interactive \u2014 it discovers installed clients (Claude Desktop, Cursor, Windsurf, Cline, Continue) and offers a multi-select. The CLI writes the correct config block into each chosen client. Then restart the client.\\n\\n### 2-alt. Manual MCP config\\n\\nRecommended (auto-updates on every launch, no global install):\\n\\n```json\\n{\\n  \\"mcpServers\\": {\\n    \\"t2000\\": {\\n      \\"command\\": \\"npx\\",\\n      \\"args\\": [\\"-y\\", \\"@t2000/mcp@latest\\"]\\n    }\\n  }\\n}\\n```\\n\\nAlternative (if `@t2000/cli` is already installed globally):\\n\\n```json\\n{\\n  \\"mcpServers\\": {\\n    \\"t2000\\": {\\n      \\"command\\": \\"t2000\\",\\n      \\"args\\": [\\"mcp\\", \\"start\\"]\\n    }\\n  }\\n}\\n```\\n\\n> Until the `t2` alias ships in Phase C, the published binary is `t2000`. Both `t2 mcp install` and `t2000 mcp install` write `command: \'t2000\'` into the AI-client config so they keep working.\\n\\n### 3. Restart the client\\n\\nThe client spawns the MCP server as a subprocess on startup. You should see `t2000_*` tools appear in the tool list.\\n\\n## Per-client config file paths\\n\\n| Client | Config file |\\n|--------|-------------|\\n| Claude Desktop (macOS) | `~/Library/Application Support/Claude/claude_desktop_config.json` |\\n| Claude Desktop (Windows) | `%APPDATA%\\\\Claude\\\\claude_desktop_config.json` |\\n| Cursor | Settings \u2192 MCP \u2192 Add new MCP server (or `~/.cursor/mcp.json`) |\\n| Cline | VSCode settings \u2192 `cline.mcpServers` |\\n| Continue | `~/.continue/config.json` under `mcpServers` |\\n\\n`t2 mcp install` writes the correct block into each of these automatically.\\n\\n## Verification (optional, before wiring into a client)\\n\\nConfirm the server responds to a real MCP `initialize` request:\\n\\n```bash\\nprintf \'%s\\\\n\' \\\\\\n  \'{\\"jsonrpc\\":\\"2.0\\",\\"id\\":1,\\"method\\":\\"initialize\\",\\"params\\":{\\"protocolVersion\\":\\"2024-11-05\\",\\"capabilities\\":{},\\"clientInfo\\":{\\"name\\":\\"test\\",\\"version\\":\\"1.0\\"}}}\' \\\\\\n  | npx -y @t2000/mcp@latest\\n```\\n\\nYou should see a JSON response containing `\\"serverInfo\\":{\\"name\\":\\"t2000\\"\u2026}` and exit. If you see that, the server is healthy and ready to be launched by a client.\\n\\n## Available Tools (14)\\n\\n### Read (6)\\n\\n| Tool | Description |\\n|------|-------------|\\n| `t2000_balance` | Current wallet balance (USDC + USDsui + SUI + gas reserve). |\\n| `t2000_address` | Wallet address. |\\n| `t2000_receive` | Generate a payment request: address + Payment Kit URI + nonce. |\\n| `t2000_history` | Recent on-chain activity (sends / swaps / pays). |\\n| `t2000_services` | Discover x402 services (gateway catalog at mpp.t2000.ai). |\\n| `t2000_agents` | Browse the agent store (agents.t2000.ai) \u2014 listings + receipt-backed reputation. |\\n\\n### Write (4)\\n\\nAll support `dryRun: true` for previews without signing (where applicable).\\n\\n| Tool | Description |\\n|------|-------------|\\n| `t2000_send` | Send USDC / USDsui / SUI. Asset REQUIRED. USDC + USDsui are gasless. |\\n| `t2000_swap` | Swap tokens via Cetus Aggregator. Requires SUI for gas. |\\n| `t2000_pay` | Pay for an x402-protected API service (USDC, gasless). |\\n| `t2000_agent_pay` | Buy an agent-store service (escrowed \u2014 auto-refund on failed delivery). |\\n\\n### Private API (3)\\n\\nNeed a `T2000_API_KEY` in the client\'s env config.\\n\\n| Tool | Description |\\n|------|-------------|\\n| `t2000_chat` | Private (zero-retention) or confidential (GPU-TEE) inference. |\\n| `t2000_models` | The Private API model catalog. |\\n| `t2000_verify` | Trustlessly verify a confidential receipt (`rcpt-\u2026`). |\\n\\n### Settings (1)\\n\\n| Tool | Description |\\n|------|-------------|\\n| `t2000_limit` | View the user\'s spending caps (on by default: $25/tx \xB7 $100/day) from `~/.t2000/config.json`. READ-ONLY \u2014 the LLM cannot set or clear limits via MCP. |\\n\\n> **v3 \u2192 v4 deletions.** The pre-v4 surface was 27 tools (DeFi save/withdraw/borrow/repay/claim, positions/rates/health/earnings/fund_status, contacts/contact_add/contact_remove, config/lock, overview, deposit_info). All deleted as part of `SPEC_AGENT_WALLET_GREENFIELD` \u2014 see the `t2000-setup` skill for the v4 product story. DeFi lives on audric.ai now; local contacts are deprecated in favor of SuiNS (`alice.sui`).\\n\\n## Prompts\\n\\nThe MCP server auto-registers one `skill-<short-name>` prompt for every `SKILL.md` baked into the bundle. The `t2000-` prefix is stripped; other prefixes (like `mpp-`) are preserved for disambiguation.\\n\\nThe current set of skill prompts mirrors `t2000-skills/skills/`:\\n\\n| Prompt | Maps to |\\n|--------|---------|\\n| `skill-setup` | `t2000-setup` \u2014 one-prompt install entry point |\\n| `skill-check-balance` | `t2000-check-balance` |\\n| `skill-send` | `t2000-send` |\\n| `skill-receive` | `t2000-receive` |\\n| `skill-swap` | `t2000-swap` |\\n| `skill-pay` | `t2000-pay` |\\n| `skill-services` | `t2000-services` |\\n| `skill-mcp` | `t2000-mcp` (this skill) |\\n| `skill-verify` | `t2000-verify` |\\n| `skill-hire` | `t2000-hire` \u2014 buy + sell on the agent store |\\n\\nInvoking the prompt loads the full skill markdown as the user message \u2014 equivalent to the agent reading the skill from `t2000.ai/skills/<slug>`. Skill files are baked into the `@t2000/mcp` bundle at build time, so they\'re always in sync with the published version.\\n\\n> The v3 \\"workflow prompts\\" (`financial-report`, `optimize-yield`, `sweep`, `risk-check`, etc., 14 total) were deleted in v4 Phase B \u2014 they composed against the dead DeFi skill set. Multi-step coordination is now an LLM concern (the v4 surface is small enough \u2014 14 tools \u2014 that pre-baked workflows add no value).\\n\\n## Troubleshooting\\n\\n| Symptom | Cause | Fix |\\n|---------|-------|-----|\\n| `npx @t2000/mcp` \\"hangs\\" with no output | Working as designed \u2014 server is waiting for JSON-RPC on stdin | Don\'t run it manually; let the AI client launch it |\\n| Server fails with `WALLET_NOT_FOUND` | No wallet at `~/.t2000/wallet.key` | Run `t2 init` first |\\n| Server fails with `WALLET_CORRUPT` | File at `~/.t2000/wallet.key` is not a v4 wallet (e.g. a pre-v4 file, hand-edited JSON, or a wallet from a different tool) | Move or delete the file, then run `t2 init` to create a fresh wallet |\\n| Client shows no `t2000_*` tools after restart | Wrong config path, or stale npx cache | Verify with the `printf | npx ...` test above; clear cache with `rm -rf ~/.npm/_npx` |\\n| `SuiClient export not found` error from old install | Cached pre-fix bundle in `~/.npm/_npx` | `rm -rf ~/.npm/_npx` then restart the client |\\n\\n## Security\\n\\n- v4 wallets are plain Bech32 JSON files (`0o600` perms) \u2014 no PIN. Anyone with read access to `~/.t2000/wallet.key` owns the wallet.\\n- Local-only stdio transport \u2014 the key never leaves the machine.\\n- `dryRun: true` previews operations before signing (on `t2000_send`).\\n- Spending limits (default $25/tx \xB7 $100/day; `t2 limit set`) gate ALL writes \u2014 CLI and MCP \u2014 enforced in `@t2000/sdk`; `t2000_limit` is read-only."},{"name":"t2000-pay","description":"Pay for an x402-protected API service using the t2000 wallet. Use when asked to call an AI model, search the web, generate images, send email, buy gift cards, send physical mail, check weather, execute code, or any task that requires a paid API. Handles the full x402 402 challenge automatically. Use t2000_services to discover all available services first.","body":"# t2000: Pay for x402 API Service\\n\\n## Status\\nActive \u2014 bundled with `@t2000/cli` (no separate install).\\n\\n**USDC payment is gasless.** The 402 challenge response is a `0x2::balance::send_funds` Move call, which is in Sui\'s foundation-sponsored allowlist. The wallet can pay even with 0 SUI in the gas reserve.\\n\\n## Purpose\\nMake a paid HTTP request to any x402-protected endpoint. Handles the 402\\nchallenge, pays via Sui USDC, and returns the API response.\\n\\n## Service Discovery\\nBefore calling `t2 pay`, discover available services:\\n```bash\\n# CLI \u2014 search by name / category / endpoint\\nt2 services search \\"image\\"           # find image-gen services\\nt2 services search \\"chat\\"            # find chat/completion endpoints\\nt2 services search \\"\\"                # list everything\\n\\n# CLI \u2014 inspect a service or endpoint\\nt2 services inspect https://mpp.t2000.ai/openai\\nt2 services inspect https://mpp.t2000.ai/openai/v1/chat/completions\\n\\n# MCP \u2014 full catalog JSON\\nt2000_services\\n```\\n\\nAll services are hosted at `https://mpp.t2000.ai/`. See the `t2000-services` skill for the full discovery workflow.\\n\\n## Command\\n```bash\\nt2 pay <url> [options]\\n```\\n\\n## Options\\n| Option | Description | Default |\\n|--------|-------------|---------|\\n| `--method <method>` | HTTP method (GET, POST, PUT) | POST |\\n| `--data <json>` | Request body for POST/PUT | \u2014 |\\n| `--max-price <amount>` | Max USDC per request | $1.00 |\\n| `--header <key=value>` | Additional HTTP header (repeatable) | \u2014 |\\n| `--timeout <seconds>` | Request timeout in seconds | 30 |\\n| `--dry-run` | Show what would be paid without paying | \u2014 |\\n\\n## Available Services\\n\\n> **The live catalog is the only source of truth for what\'s available and what it costs.**\\n> Discover services and current per-endpoint prices with `t2000_services` (MCP) or\\n> `GET https://mpp.t2000.ai/api/services`. Inspect one with `t2 services inspect <url>`.\\n> Prices are NOT listed here on purpose \u2014 they would drift from the catalog. Resolve the\\n> real price at call time (the `--max-price` ceiling guards against overpaying), or run\\n> `t2 pay <url> --dry-run` to see what would be charged before paying.\\n\\nThe catalog spans every major AI + data API, grouped roughly as:\\n\\n- **AI models & reasoning** \u2014 OpenAI, Anthropic (Claude), Google Gemini, DeepSeek, Groq, Together AI, Perplexity, Mistral, Cohere (chat, embeddings, rerank).\\n- **Media & generation** \u2014 OpenAI (images, text-to-speech), fal.ai (Flux, Recraft, Whisper, Stable Audio), Together AI (images), ElevenLabs (TTS, sound effects), Replicate, Stability AI, AssemblyAI.\\n- **Search** \u2014 Brave, Exa, Serper, SerpAPI, NewsAPI.\\n- **Web & documents** \u2014 Firecrawl (scrape / crawl / map / extract), Jina Reader, ScreenshotOne, PDFShift, QR Code.\\n- **Data & finance** \u2014 OpenWeather, Google Maps (geocode / places / directions), CoinGecko, Alpha Vantage, ExchangeRate.\\n- **Translation** \u2014 DeepL, Google Translate.\\n- **Intelligence & security** \u2014 Hunter.io, IPinfo, VirusTotal.\\n- **Tools & utility** \u2014 Judge0 (code exec), Resend (email), Pushover (push), Short.io (URL shortener), TinyPNG (image compression & resize).\\n- **Commerce** \u2014 Lob (postcards, letters, address verification).\\n\\nThis list is a capability map, not the exhaustive endpoint set \u2014 always discover via the catalog before calling.\\n\\n## Example Commands\\n\\n### Ask an AI model\\n```bash\\nt2 pay https://mpp.t2000.ai/openai/v1/chat/completions \\\\\\n  --data \'{\\"model\\":\\"gpt-4o\\",\\"messages\\":[{\\"role\\":\\"user\\",\\"content\\":\\"Explain quantum computing in 3 sentences\\"}]}\'\\n```\\n\\n### Search the web\\n```bash\\nt2 pay https://mpp.t2000.ai/brave/v1/web/search \\\\\\n  --data \'{\\"q\\":\\"latest Sui blockchain news\\"}\'\\n```\\n\\n### Generate an image\\n```bash\\nt2 pay https://mpp.t2000.ai/fal/fal-ai/flux/dev \\\\\\n  --data \'{\\"prompt\\":\\"a futuristic city at sunset, cyberpunk style\\"}\'\\n```\\n\\n### Check weather\\n```bash\\nt2 pay https://mpp.t2000.ai/openweather/v1/weather \\\\\\n  --data \'{\\"q\\":\\"Tokyo\\"}\'\\n```\\n\\n### Send an email\\n```bash\\nt2 pay https://mpp.t2000.ai/resend/v1/emails \\\\\\n  --data \'{\\"from\\":\\"agent@t2000.ai\\",\\"to\\":\\"user@example.com\\",\\"subject\\":\\"Hello\\",\\"text\\":\\"Sent by an AI agent\\"}\'\\n```\\n\\n### Execute code\\n```bash\\nt2 pay https://mpp.t2000.ai/judge0/v1/submissions \\\\\\n  --data \'{\\"source_code\\":\\"print(42)\\",\\"language_id\\":71}\'\\n```\\n\\n### Send physical mail\\n```bash\\n# Send a postcard\\nt2 pay https://mpp.t2000.ai/lob/v1/postcards \\\\\\n  --max-price 2 \\\\\\n  --data \'{\\n    \\"to\\":{\\"name\\":\\"Jane Doe\\",\\"address_line1\\":\\"123 Main St\\",\\"address_city\\":\\"San Francisco\\",\\"address_state\\":\\"CA\\",\\"address_zip\\":\\"94105\\"},\\n    \\"from\\":{\\"name\\":\\"AI Agent\\",\\"address_line1\\":\\"456 Oak Ave\\",\\"address_city\\":\\"Palo Alto\\",\\"address_state\\":\\"CA\\",\\"address_zip\\":\\"94301\\"},\\n    \\"front\\":\\"https://example.com/front.png\\",\\n    \\"back\\":\\"https://example.com/back.png\\",\\n    \\"use_type\\":\\"operational\\"\\n  }\'\\n\\n# Send a letter\\nt2 pay https://mpp.t2000.ai/lob/v1/letters \\\\\\n  --max-price 2 \\\\\\n  --data \'{\\n    \\"to\\":{\\"name\\":\\"Jane Doe\\",\\"address_line1\\":\\"123 Main St\\",\\"address_city\\":\\"San Francisco\\",\\"address_state\\":\\"CA\\",\\"address_zip\\":\\"94105\\"},\\n    \\"from\\":{\\"name\\":\\"AI Agent\\",\\"address_line1\\":\\"456 Oak Ave\\",\\"address_city\\":\\"Palo Alto\\",\\"address_state\\":\\"CA\\",\\"address_zip\\":\\"94301\\"},\\n    \\"file\\":\\"https://example.com/letter.pdf\\",\\n    \\"use_type\\":\\"operational\\",\\n    \\"color\\":false\\n  }\'\\n\\n# Verify a US address\\nt2 pay https://mpp.t2000.ai/lob/v1/verify \\\\\\n  --data \'{\\"primary_line\\":\\"123 Main St\\",\\"city\\":\\"San Francisco\\",\\"state\\":\\"CA\\",\\"zip_code\\":\\"94105\\"}\'\\n```\\n\\n### Get directions\\n```bash\\nt2 pay https://mpp.t2000.ai/googlemaps/v1/directions \\\\\\n  --data \'{\\"origin\\":\\"San Francisco, CA\\",\\"destination\\":\\"Palo Alto, CA\\"}\'\\n```\\n\\n### Get crypto prices\\n```bash\\nt2 pay https://mpp.t2000.ai/coingecko/v1/price \\\\\\n  --data \'{\\"ids\\":\\"sui,bitcoin,ethereum\\",\\"vs_currencies\\":\\"usd\\"}\'\\n```\\n\\n### Get a stock quote\\n```bash\\nt2 pay https://mpp.t2000.ai/alphavantage/v1/quote \\\\\\n  --data \'{\\"symbol\\":\\"AAPL\\"}\'\\n```\\n\\n### Get breaking news\\n```bash\\nt2 pay https://mpp.t2000.ai/newsapi/v1/headlines \\\\\\n  --data \'{\\"country\\":\\"us\\",\\"category\\":\\"technology\\"}\'\\n```\\n\\n### Translate text\\n```bash\\nt2 pay https://mpp.t2000.ai/deepl/v1/translate \\\\\\n  --data \'{\\"text\\":[\\"Hello, how are you?\\"],\\"target_lang\\":\\"ES\\"}\'\\n```\\n\\n### Semantic search\\n```bash\\nt2 pay https://mpp.t2000.ai/exa/v1/search \\\\\\n  --data \'{\\"query\\":\\"best practices for AI agent payments\\",\\"numResults\\":5}\'\\n```\\n\\n### Read a URL as markdown\\n```bash\\nt2 pay https://mpp.t2000.ai/jina/v1/read \\\\\\n  --data \'{\\"url\\":\\"https://docs.sui.io/concepts/tokenomics\\"}\'\\n```\\n\\n### Google search (structured)\\n```bash\\nt2 pay https://mpp.t2000.ai/serper/v1/search \\\\\\n  --data \'{\\"q\\":\\"Sui blockchain TVL 2026\\"}\'\\n```\\n\\n### Screenshot a webpage\\n```bash\\nt2 pay https://mpp.t2000.ai/screenshot/v1/capture \\\\\\n  --data \'{\\"url\\":\\"https://example.com\\",\\"format\\":\\"png\\",\\"viewport_width\\":\\"1280\\"}\'\\n```\\n\\n### Generate a QR code\\n```bash\\nt2 pay https://mpp.t2000.ai/qrcode/v1/generate \\\\\\n  --data \'{\\"data\\":\\"https://t2000.ai\\",\\"size\\":\\"400x400\\"}\'\\n```\\n\\n### Convert HTML to PDF\\n```bash\\nt2 pay https://mpp.t2000.ai/pdfshift/v1/convert \\\\\\n  --data \'{\\"source\\":\\"https://t2000.ai/docs\\"}\'\\n```\\n\\n### Run a Replicate model\\n```bash\\nt2 pay https://mpp.t2000.ai/replicate/v1/predictions \\\\\\n  --data \'{\\"model\\":\\"meta/llama-3-70b-instruct\\",\\"input\\":{\\"prompt\\":\\"Explain DeFi in 3 sentences\\"}}\'\\n```\\n\\n### Find emails for a domain\\n```bash\\nt2 pay https://mpp.t2000.ai/hunter/v1/search \\\\\\n  --data \'{\\"domain\\":\\"mystenlabs.com\\"}\'\\n```\\n\\n### Look up an IP address\\n```bash\\nt2 pay https://mpp.t2000.ai/ipinfo/v1/lookup \\\\\\n  --data \'{\\"ip\\":\\"8.8.8.8\\"}\'\\n```\\n\\n### Search for flights\\n```bash\\nt2 pay https://mpp.t2000.ai/serpapi/v1/flights \\\\\\n  --data \'{\\"departure_id\\":\\"LAX\\",\\"arrival_id\\":\\"NRT\\",\\"outbound_date\\":\\"2026-05-01\\",\\"type\\":\\"2\\"}\'\\n```\\n\\n### Convert currency\\n```bash\\nt2 pay https://mpp.t2000.ai/exchangerate/v1/convert \\\\\\n  --data \'{\\"from\\":\\"USD\\",\\"to\\":\\"EUR\\",\\"amount\\":100}\'\\n```\\n\\n### Scan a URL for malware\\n```bash\\nt2 pay https://mpp.t2000.ai/virustotal/v1/scan \\\\\\n  --data \'{\\"url\\":\\"https://suspicious-site.com\\"}\'\\n```\\n\\n### Shorten a URL\\n```bash\\nt2 pay https://mpp.t2000.ai/shortio/v1/shorten \\\\\\n  --data \'{\\"url\\":\\"https://example.com/very/long/url/path\\"}\'\\n```\\n\\n### Send a push notification\\n```bash\\nt2 pay https://mpp.t2000.ai/pushover/v1/push \\\\\\n  --data \'{\\"user\\":\\"USER_KEY\\",\\"message\\":\\"Your agent has a message!\\"}\'\\n```\\n\\n## Flow (automatic)\\n1. Makes initial HTTP request to the URL\\n2. If 402: reads x402 challenge for amount and terms\\n3. If price <= --max-price: pays via Sui USDC\\n4. Retries with credential header\\n5. Returns the API response body\\n\\n## Safety\\n- If requested price exceeds --max-price, payment is refused (no funds spent)\\n- Default max-price: $1.00 USDC per request\\n- For commerce (mail, merch), set --max-price higher\\n- Payment only broadcast after 402 terms are validated\\n\\n## Errors\\n- `PRICE_EXCEEDS_LIMIT`: API asking more than --max-price\\n- `INSUFFICIENT_BALANCE`: not enough available USDC\\n- `UNSUPPORTED_NETWORK`: x402 requires a network other than Sui\\n- `PAYMENT_EXPIRED`: payment challenge has expired\\n- `DUPLICATE_PAYMENT`: nonce already used on-chain\\n\\n## MCP\\nVia MCP: use `t2000_services` to discover services, then `t2000_pay` to call them."},{"name":"t2000-receive","description":"Generate a payment request for the t2000 Agent Wallet \u2014 print the wallet address, an ANSI QR code, and (via MCP) a Payment Kit URI (sui:pay?\u2026). Use when asked to receive a payment, share a wallet address, create a payment link, or set up a fund-me link.","body":"# t2000: Receive Funds\\n\\n## Purpose\\n\\nSurface the wallet address (and optionally a Payment Kit URI with a pre-filled amount + memo) so anyone with a Sui wallet can send tokens to the Agent Wallet. Two surfaces:\\n\\n- **CLI (`t2 fund`)** \u2014 prints the wallet address + an ANSI QR code + the value-promise in the terminal. Minimal; no amount or memo.\\n- **MCP (`t2000_receive`)** \u2014 returns a JSON payload with the address, an optional Payment Kit URI (`sui:pay?\u2026`), a nonce, plus an optional amount / currency / memo / label. Use this when the LLM is building a payment-request flow.\\n\\n## Rules\\n\\n1. **Receive is non-custodial.** The user\'s address is public; sharing it can\'t move money \u2014 only signed transactions can. Don\'t add scary disclaimers; the operation is safe.\\n2. **Show the QR + the address text.** Some users scan, some copy. Both surfaces.\\n3. **No PIN, no sign-in.** v4 wallets are plain Bech32; `t2 fund` is a pure read with no authentication step.\\n4. **Default currency is USDC.** When asking the user to fund the wallet, USDC is the most useful (every paid service is USDC-denominated, USDC sends are gasless). USDsui also works.\\n5. **Don\'t generate a Payment Kit URI without an amount unless asked.** A bare address scans just as well; URIs with amounts force the sender into a particular tx shape.\\n\\n## CLI command\\n\\n```bash\\nt2 fund                               # address + ANSI QR + share line\\nt2 fund --qr-only                     # just the QR (e.g. for embedding in a screenshot)\\nt2 fund --key <path>                  # custom wallet path\\nt2 fund --json                        # { address, qrEncodedFor, valuePromise }\\n```\\n\\nCLI output (default):\\n\\n```\\nAddress  0x55b223b0...0dd1b6\\n\\n  Scan to send tokens to this wallet:\\n\\n  \u2588\u2580\u2580\u2580\u2580\u2580\u2588 \u2584 \u2580\u2584  \u2588 \u2584\u2580 \u2584 \u2588\u2580\u2580\u2580\u2580\u2580\u2588\\n  \u2588 \u2588\u2588\u2588 \u2588 \u2588  \u2580 \u2588 \u2584\u2584  \u2580\u2580 \u2588 \u2588\u2588\u2588 \u2588\\n  \u2588 \u2580\u2580\u2580 \u2588 \u2580\u2584\u2580\u2584\u2588\u2580 \u2580\u2584 \u2580\u2584  \u2588 \u2580\u2580\u2580 \u2588\\n  \u2580\u2580\u2580\u2580\u2580\u2580\u2580 \u2580 \u2588\u2580\u2580 \u2588 \u2580 \u2580 \u2580\u2580\u2580\u2580\u2580\u2580\u2580\u2580\u2580\\n  ... (truncated)\\n\\n  Or share `0x55b223b0...0dd1b6` directly.\\n```\\n\\nThe CLI prints to ANSI \u2014 it will look right in any terminal but won\'t render as image data in MCP responses. Use the MCP tool for a structured JSON response.\\n\\n## MCP tool (`t2000_receive`)\\n\\n```json\\n// Request\\n{\\n  \\"amount\\": 10,              // optional \u2014 pre-fills the sender\'s tx amount\\n  \\"currency\\": \\"USDC\\",        // optional \u2014 default USDC, also accepts USDsui / SUI\\n  \\"memo\\": \\"Coffee on me\\",    // optional \u2014 encoded into the Payment Kit URI\\n  \\"label\\": \\"Coffee fund\\"     // optional \u2014 human-readable label for the URI\\n}\\n\\n// Response\\n{\\n  \\"address\\": \\"0x55b223b0...0dd1b6\\",\\n  \\"uri\\": \\"sui:pay?recipient=0x55b223b0...&amount=10000000&coinType=0xdba34672...::usdc::USDC&nonce=abc-123&label=Coffee+fund&message=Coffee+on+me\\",\\n  \\"nonce\\": \\"abc-123-uuid\\",\\n  \\"amount\\": 10,\\n  \\"currency\\": \\"USDC\\",\\n  \\"memo\\": \\"Coffee on me\\",\\n  \\"label\\": \\"Coffee fund\\"\\n}\\n```\\n\\nThe Payment Kit URI follows the [Sui Payment Kit spec](https://docs.sui.io/) \u2014 every Sui wallet (Mysten, Phantom, Suiet, Slush, Sui Wallet Standard) can scan/parse it. If you omit `amount`, the URI is a \\"bring your own amount\\" link that the sender fills in.\\n\\n### URI shapes\\n\\n| Args | URI shape |\\n|---|---|\\n| no amount, no memo, default currency | `sui:0x<address>` |\\n| no amount, custom currency or memo | `sui:0x<address>?currency=USDsui&memo=\u2026` |\\n| with amount | `sui:pay?recipient=0x<address>&amount=<raw>&coinType=<full-type>&nonce=<uuid>[&label=\u2026][&message=\u2026]` |\\n\\nThe amount-bearing form uses raw on-chain units (USDC: \xD7 10^6, SUI: \xD7 10^9) so wallets don\'t have to do their own conversion. The `nonce` is a UUID v4 minted at request time; senders include it in the tx metadata so the receiving agent can correlate the inflow back to the request.\\n\\n## When to use which surface\\n\\n| Need | Use |\\n|---|---|\\n| \\"What\'s my wallet address?\\" | `t2 fund` (CLI) or `t2000_address` (MCP \u2014 address only, no QR) |\\n| \\"Show me the QR\\" | `t2 fund` (CLI prints ANSI QR) |\\n| \\"Generate a payment link for $10\\" | `t2000_receive { amount: 10, currency: \\"USDC\\" }` (MCP) |\\n| \\"Generate a \'tip jar\' link\\" (no amount) | `t2000_receive { memo: \\"Tip jar\\", label: \\"Tip funkii\\" }` (MCP) |\\n\\n## Notes\\n\\n- USDC + USDsui inflows arrive gasless (Sui foundation pays the sender\'s gas via the `0x2::balance::send_funds` allowlist).\\n- SUI inflows require the sender to have SUI for their own gas.\\n- Once the funds land, run `t2 balance` (CLI) or `t2000_balance` (MCP) to verify. Inflows show up within ~1 block (~500 ms).\\n- This skill is the receive-half of \\"Audric Pay\\". The send-half is the `t2000-send` skill.\\n\\n## What NOT to do\\n\\n- Don\'t include the user\'s address inline in chat messages without confirming they want it shared. It\'s public \u2014 but politeness matters.\\n- Don\'t generate a one-off Payment Kit URI for every conversation. The bare address works fine for repeated transfers.\\n- Don\'t redirect users to audric.ai for receive flows \u2014 the Agent Wallet handles receive natively. (Audric Pay\'s hosted UI is for users who DON\'T have the CLI.)"},{"name":"t2000-send","description":"Send USDC, USDsui, or SUI from the t2000 Agent Wallet to another Sui address. Use when asked to pay someone, transfer funds, send money, tip a creator, or make a payment to a specific Sui address, SuiNS name, or saved contact. Do NOT use for API payments \u2014 use the t2000-pay skill for x402-protected services.","body":"# t2000: Send USDC / USDsui / SUI\\n\\n## Purpose\\n\\nTransfer USDC, USDsui, or SUI from the agent\'s available balance to any Sui address. **USDC + USDsui are gasless** \u2014 they go through Sui\'s protocol-level `0x2::balance::send_funds` path (Sui foundation sponsored). **SUI is not gasless** \u2014 the wallet must hold some SUI to cover the gas fee (typically < $0.0002).\\n\\n## Rules\\n\\n1. **Asset is REQUIRED.** v4 has no implicit USDC default. `t2 send 5 alice.sui` exits with a clear error pointing at the missing `<asset>` arg. Always pass one of `USDC | USDsui | SUI`.\\n2. **Only USDC / USDsui / SUI are accepted.** Other tokens (e.g. USDY, USDT, USDe) are rejected with `unsupported asset`. To send a different asset, the user first swaps it via `t2 swap` (or audric.ai) into USDC, USDsui, or SUI.\\n3. **Validate the recipient first.** Names \u2192 SuiNS resolves (`alice.sui`). Raw addresses \u2192 `isValidSuiAddress()`. The SDK throws clear errors (`INVALID_ADDRESS`, `SUINS_NOT_REGISTERED`); don\'t guess.\\n4. **Prefer SuiNS names.** `alice.sui` is globally resolvable \u2014 surface it as the recommended way to address a recipient. (There is no local contacts/alias map.)\\n5. **Sends are single-write.** Each transfer is its own intent. If you need send + something else, sequence them across turns.\\n6. **Amount precision matters.** Floor to the asset\'s decimals (USDC + USDsui: 6, SUI: 9). Never round up \u2014 `Math.round` can produce a number larger than the on-chain balance and the transfer will fail simulation.\\n7. **Multi-recipient = multiple sends.** A \\"send to A, B, C\\" request emits N sequential `t2 send` invocations (CLI) or N `t2000_send` tool calls (MCP). Each is atomic.\\n8. **Limits apply to every write (CLI and MCP).** Limits are on by default ($25/tx \xB7 $100/day cumulative); if the request exceeds a cap the write throws `LIMIT_EXCEEDED`. Override one time with `--force` (CLI).\\n\\n## Command\\n\\n```bash\\nt2 send <amount> <asset> <recipient>\\nt2 send <amount> <asset> to <recipient>      # `to` filler optional\\n\\n# Examples:\\nt2 send 5 USDC 0x8b3e...d412                  # 5 USDC to a hex address (gasless)\\nt2 send 5 USDsui alice.sui                    # 5 USDsui to a SuiNS name (gasless)\\nt2 send 50 USDC to mission69b@audric          # @audric handle (gasless)\\nt2 send 0.1 SUI 0x8b3e...d412                 # 0.1 SUI to a hex address (gas required)\\n```\\n\\nUse `--force` to bypass a spending limit one time. Use `--key <path>` to point at a non-default wallet file.\\n\\n## Output (default)\\n\\n```\\n\u2713 Sent $5.00 USDC \u2192 alex.sui (0x8b3e...d412)\\n  Gas:  gasless \u26A1\\n  Tx:   https://suiscan.xyz/mainnet/tx/0xdigest...\\n```\\n\\nFor non-gasless sends (SUI), the gas line shows the actual SUI burn:\\n\\n```\\n\u2713 Sent 0.1000 SUI \u2192 0x8b3e...d412\\n  Gas:  0.000123 SUI\\n  Tx:   https://suiscan.xyz/mainnet/tx/0xdigest...\\n```\\n\\n## Output (--json)\\n\\n```json\\n{\\n  \\"tx\\": \\"0xdigest...\\",\\n  \\"amount\\": 5,\\n  \\"to\\": \\"0x8b3e...d412\\",\\n  \\"suinsName\\": \\"alex.sui\\",\\n  \\"gasCost\\": 0,\\n  \\"gasCostUnit\\": \\"SUI\\",\\n  \\"asset\\": \\"USDC\\",\\n  \\"gasless\\": true\\n}\\n```\\n\\n## Pre-flight checks (automatic)\\n\\n1. Sufficient asset balance (USDC / USDsui / SUI as requested).\\n2. For SUI sends only: sufficient SUI for gas.\\n3. For USDC + USDsui: zero SUI is acceptable \u2014 the Sui foundation sponsors the gas.\\n4. Limit check (CLI only): per-tx cap (any asset) + daily-send cap (any asset). Override with `--force`.\\n\\n## Error handling\\n\\n| Error code | Meaning |\\n|---|---|\\n| `INSUFFICIENT_BALANCE` | Wallet balance for the chosen asset is less than the requested amount. |\\n| `INSUFFICIENT_GAS` | SUI sends only \u2014 wallet has the asset but not enough SUI for gas. Suggest a swap. |\\n| `INVALID_ADDRESS` | Recipient is not a valid Sui hex address. |\\n| `INVALID_ASSET` | Asset is missing or not in the allowlist (USDC / USDsui / SUI). |\\n| `SUINS_NOT_REGISTERED` | The `.sui` name isn\'t registered. |\\n| `CONTACT_NOT_FOUND` | The name isn\'t a SuiNS name, an @audric handle, or a saved local contact. |\\n| `LIMIT_EXCEEDED` | CLI hit a `t2 limit set` cap. Use `--force` to override. |\\n| `SIMULATION_FAILED` | Transaction would fail on-chain (details in the error message). |\\n\\n## Recipient resolution flow\\n\\nThe SDK (`T2000.resolveRecipient`) handles resolution in this priority order:\\n\\n1. **Hex address** (starts with `0x`) \u2192 validated via `isValidSuiAddress()`. If invalid \u2192 `INVALID_ADDRESS`.\\n2. **SuiNS name** (`*.sui`) \u2192 resolves via SuiNS registry. If unregistered \u2192 `SUINS_NOT_REGISTERED`.\\n\\nAnything else throws `INVALID_ADDRESS` with a hint to use a 0x address or a `.sui` name. (There is no local contacts/alias map \u2014 SuiNS is the canonical name layer for Sui addresses.)\\n\\n## When called through MCP (`t2000_send` tool)\\n\\nThe MCP `t2000_send` tool has the same asset-required contract:\\n\\n```json\\n{\\n  \\"to\\": \\"alice.sui\\",\\n  \\"amount\\": 5,\\n  \\"asset\\": \\"USDC\\",\\n  \\"dryRun\\": false\\n}\\n```\\n\\n- `dryRun: true` returns a preview without signing \u2014 useful for confirming the resolved address + gasless badge before the actual write.\\n- `asset` is REQUIRED \u2014 calls without it return an error.\\n- Both CLI and MCP writes honor `t2 limit set` caps (enforced in `@t2000/sdk`). Default caps: $25/tx \xB7 $100/day cumulative."},{"name":"t2000-services","description":"Discover x402 services payable via `t2 pay`. Use when the user asks \\"what can I pay for?\\", \\"what AI models are available?\\", \\"show me the service catalog\\", \\"is there a weather API?\\", or any other discovery question. Pairs with the t2000-pay skill (discovery first, then pay).","body":"# t2000: Discover x402 Services\\n\\n## Purpose\\n\\nBrowse the live x402 gateway catalog at `mpp.t2000.ai` to find a service that matches the user\'s intent (chat, image gen, search, weather, email, code exec, mail, etc.) before calling `t2 pay`. The catalog spans every major AI + data API, with per-call prices that vary by endpoint \u2014 always check the live catalog rather than assuming a fixed count or price.\\n\\n## Rules\\n\\n1. **Discover before paying.** Don\'t guess a URL \u2014 call `t2 services search` (CLI) or `t2000_services` (MCP) first. Service paths + pricing change as the gateway expands.\\n2. **Pick the cheapest endpoint that satisfies the user.** Many services have multiple tiers (e.g. `openai/v1/chat/completions` at $0.01 vs `openai/v1/audio/speech` at $0.05). Surface options.\\n3. **Surface pricing to the user before signing.** Every `t2 pay` write is opt-in via the user\'s own keypair \u2014 they deserve to know what they\'re spending.\\n4. **Live source of truth.** The catalog is fetched live from `https://mpp.t2000.ai/api/services` \u2014 what shows up via `t2 services search` is exactly what `t2 pay` can talk to.\\n\\n## Commands\\n\\n```bash\\n# Search by name / category / endpoint description (case-insensitive)\\nt2 services search <query>             # default limit: 10\\nt2 services search <query> --limit 50  # broaden the result set\\nt2 services search \\"\\"                  # list everything (empty query)\\n\\n# Inspect a single service or endpoint URL\\nt2 services inspect <service-or-endpoint-url>\\n\\n# JSON output for scripting\\nt2 services search \\"image\\" --json\\nt2 services inspect <url> --json\\n```\\n\\nThe CLI uses `T2000_GATEWAY_URL` (or `--gateway <url>`) to override the gateway base URL \u2014 useful for local dev against `apps/gateway`.\\n\\n## Example workflow\\n\\n### \\"What AI chat models are available?\\"\\n\\n```bash\\nt2 services search \\"chat\\"\\n```\\n\\nReturns a table of chat services (OpenAI, Anthropic, Gemini, Mistral, Cohere, DeepSeek, Groq, etc.) with cheapest endpoint price + base URL.\\n\\n### \\"How much does GPT-4o cost?\\"\\n\\n```bash\\nt2 services inspect https://mpp.t2000.ai/openai\\n```\\n\\nReturns every OpenAI endpoint with method + path + price + description. The user picks one (e.g. `/v1/chat/completions` at $0.01) and copies the URL into a `t2 pay <url>` call.\\n\\n### \\"Send an email via Resend\\"\\n\\n```bash\\nt2 services search \\"email\\"\\nt2 services inspect https://mpp.t2000.ai/resend\\n```\\n\\nLists email + messaging services; inspect Resend to see `/v1/emails` at $0.05.\\n\\n### \\"What\'s the price of SUI?\\" (market data)\\n\\nLive crypto prices, stock quotes, and forex are brokered through the gateway\'s **Finance** providers (CoinGecko, AlphaVantage, ExchangeRate) \u2014 t2000 doesn\'t host its own market-data API; it routes to these and bills per call in USDC. (Wallet reads like `t2 balance` stay amount-only on purpose \u2014 pricing is an explicit, opt-in paid call, not baked into balance.)\\n\\n```bash\\nt2 services search \\"price\\"\\nt2 services inspect https://mpp.t2000.ai/coingecko\\n```\\n\\nLists the Finance providers, then shows CoinGecko\'s endpoints with exact per-call price. Copy the endpoint URL into `t2 pay <url>` to fetch the quote. (For SUI-name resolution \u2014 the ENS analog \u2014 use `t2` SuiNS resolution directly; it\'s in-house, not a paid service.)\\n\\n## Output (default \u2014 search)\\n\\n```\\n3 services matching \\"chat\\":\\n\\nOpenAI                  from $0.01  [ai, chat]\\n  url    https://mpp.t2000.ai/openai\\n  about  OpenAI Chat Completions API\\n\\nAnthropic               from $0.01  [ai, chat]\\n  url    https://mpp.t2000.ai/anthropic\\n  about  Claude messages API\\n\\nMistral                 from $0.005 [ai, chat]\\n  url    https://mpp.t2000.ai/mistral\\n  about  Mistral chat completions\\n\\nUse `t2 services inspect <url>` to see pricing + endpoints for a service.\\n```\\n\\n## Output (default \u2014 inspect endpoint)\\n\\n```\\nService     OpenAI\\nURL         https://mpp.t2000.ai/openai\\nAbout       OpenAI Chat Completions API\\nCategories  ai, chat\\nCurrency    USDC on Sui\\n\\nPOST /v1/chat/completions          $0.01  Chat completions (gpt-4o, gpt-4o-mini)\\n  url    https://mpp.t2000.ai/openai/v1/chat/completions\\n\\nPay with: `t2 pay https://mpp.t2000.ai/openai/v1/chat/completions`\\n```\\n\\n## Output (--json)\\n\\n```json\\n{\\n  \\"query\\": \\"chat\\",\\n  \\"count\\": 3,\\n  \\"services\\": [\\n    {\\n      \\"name\\": \\"OpenAI\\",\\n      \\"serviceUrl\\": \\"https://mpp.t2000.ai/openai\\",\\n      \\"description\\": \\"OpenAI Chat Completions API\\",\\n      \\"categories\\": [\\"ai\\", \\"chat\\"],\\n      \\"currency\\": \\"USDC\\",\\n      \\"chain\\": \\"Sui\\",\\n      \\"endpoints\\": [\\n        { \\"method\\": \\"POST\\", \\"path\\": \\"/v1/chat/completions\\", \\"price\\": \\"0.01\\", \\"description\\": \\"Chat completions\\" }\\n      ]\\n    }\\n  ]\\n}\\n```\\n\\n## When called through MCP (`t2000_services` tool)\\n\\nThe MCP tool returns the full catalog JSON in one call (no search filter \u2014 the LLM filters in its head):\\n\\n```json\\n{\\n  \\"services\\": [\\n    { \\"name\\": \\"OpenAI\\", \\"serviceUrl\\": \\"https://mpp.t2000.ai/openai\\", \\"endpoints\\": [...] },\\n    { \\"name\\": \\"Anthropic\\", \\"serviceUrl\\": \\"https://mpp.t2000.ai/anthropic\\", \\"endpoints\\": [...] },\\n    ...\\n  ]\\n}\\n```\\n\\nFor LLM-driven flows, this is the right shape \u2014 the LLM scans the catalog, picks the matching service, and calls `t2000_pay <url>` next.\\n\\n## Categories (live)\\n\\nThe current catalog clusters into:\\n\\n| Category | Services |\\n|---|---|\\n| AI / chat | OpenAI, Anthropic, Gemini, Mistral, Cohere, DeepSeek, Groq, \u2026 |\\n| AI / image gen | fal.ai, Stability AI, OpenAI DALL-E, Replicate |\\n| AI / audio | OpenAI Whisper, ElevenLabs, OpenAI TTS |\\n| Search | NewsAPI, Brave, Exa, Serper, SerpAPI, Jina |\\n| Weather / maps | OpenWeather, Google Maps |\\n| Finance | CoinGecko, AlphaVantage, ExchangeRate |\\n| Translation | DeepL, Google Translate |\\n| Code / utility | Judge0, screenshot-as-a-service, QR codes, PDFShift |\\n| Email / mail | Resend, Lob (postcards, letters, verify) |\\n| Commerce | Hunter (email discovery) |\\n| Security | VirusTotal |\\n| Messaging | Pushover |\\n| URL / IP | Short.io, IPinfo |\\n\\n> The categories above are a snapshot \u2014 the live source is `t2 services search \\"\\"` (lists everything). New services land regularly.\\n\\n## Error handling\\n\\n| Error | Meaning |\\n|---|---|\\n| `GATEWAY_UNREACHABLE` | The gateway at `mpp.t2000.ai/api/services` is down or DNS is failing. Retry; if persistent, status page is at `t2000.ai`. |\\n| `No services match` | The search query returned zero hits. Suggest a broader query or `t2 services search \\"\\"` to list everything. |\\n| `No service matches <url>` (inspect) | The URL isn\'t in the catalog. Run `t2 services search` to find the right URL first. |\\n\\n## What NOT to do\\n\\n- Don\'t hardcode service URLs in your prompts. The catalog is the source of truth.\\n- Don\'t tell users a service costs \\"around $X\\" \u2014 call `t2 services inspect` and quote the exact price.\\n- Don\'t bundle `t2 services search` + `t2 pay` into a single hidden step. Show the user what you found before paying."},{"name":"t2000-setup","description":"Set up a t2000 Agent Wallet end-to-end on the user\'s machine. Use when the user says \\"set up t2000\\", \\"install the wallet\\", \\"create my Agent Wallet\\", \\"connect t2000 to Claude / Cursor\\", or pastes a one-prompt install URL. Covers wallet creation, optional spending limits, and MCP wiring. Read this first when bootstrapping a new user; the other skills assume this has run.","body":"# t2000: Agent Wallet \u2014 One-Prompt Setup\\n\\n## Purpose\\n\\nGet a fresh user from \\"nothing installed\\" to \\"Agent Wallet ready\\" in under 5 minutes. This is the canonical entry point for the **one-prompt install** UX:\\n\\n```\\nRun curl -sL https://t2000.ai/skills/t2000-setup, and use the returned setup\\ninstructions to set up my Agent Wallet.\\n```\\n\\nWhen invoked through that prompt, the LLM fetches this file, then executes the steps below in order.\\n\\n## Rules\\n\\n1. **Walk the steps in order.** Each step depends on the previous one. Skipping breaks setup.\\n2. **Stop at the first failure.** If `t2 init` errors, do not proceed to the next step; report the error and ask the user to retry.\\n3. **Confirm AI-client choice before MCP install.** Don\'t assume Claude Desktop vs. Cursor vs. Windsurf \u2014 ask which they use, then pick the matching config path.\\n4. **Setup is read + write \u2014 show, then ask.** Echo each command you\'re about to run. The user runs it (or confirms you can). Never silently shell out.\\n5. **No PIN. No encryption.** v4 wallets are plain Bech32 JSON files with `0o600` perms (matching the Sui CLI). The user owns the file; back it up via `t2 export`.\\n6. **Prime this session for x402 payments.** Once setup succeeds, for the rest of this conversation treat any request to use an external or paid API \u2014 fal.ai, ElevenLabs, OpenAI, CoinGecko, Lob, etc. \u2014 as something this wallet CAN do via `t2000_pay`. Discover the endpoint with `t2000_services`, then pay. Do **not** tell the user the API is unreachable / not on an allowlist, and do **not** fall back to writing a script for them to run. The wallet IS the connector.\\n\\n## Steps\\n\\n### Step 1 \u2014 Install the CLI\\n\\n```bash\\nnpm install -g @t2000/cli\\n```\\n\\nVerify:\\n```bash\\nt2 --version\\n# Should print: 5.x.x\\n```\\n\\nIf `npm` is missing, point the user to https://nodejs.org/ (Node 18+).\\n\\n> **Binary naming.** `npm install -g @t2000/cli` installs two equivalent bins: **`t2`** (canonical) and **`t2000`** (alias) \u2014 both point at the same CLI, so `t2 <verb>` and `t2000 <verb>` are interchangeable. If you get `t2: command not found` right after a successful install, npm\'s global bin directory isn\'t on your `PATH` \u2014 see Troubleshooting at the bottom of this skill.\\n\\n### Step 2 \u2014 Create a wallet\\n\\n```bash\\nt2 init                              # fresh wallet\\nt2 init --import                     # import an existing Bech32 secret (interactive prompt)\\nt2 init --import suiprivkey1xxx...   # import via flag (warns: shell history exposure)\\n```\\n\\n`t2 init` (no flag):\\n- Generates a fresh Ed25519 keypair on Sui mainnet.\\n- Writes the plain Bech32 private key to `~/.t2000/wallet.key` (mode `0o600`).\\n- Prints the wallet address.\\n- **Seeds conservative spending limits by default** \u2014 $25/tx and $100/day (cumulative USD) \u2014 and prints them. Adjust or clear in Step 4.\\n\\n`t2 init --import`:\\n- Prompts for a `suiprivkey1...` secret with hidden input (the secret won\'t appear in shell history or screen scroll).\\n- Validates the Bech32 format, derives the address, writes the wallet file.\\n- Used for: re-creating the wallet on a fresh box (paired with `t2 export` on the source box), or bringing in a key from another tool (Sui CLI, hardware wallet, etc.).\\n\\n> **Upgrading from v3 (PIN-encrypted)?** v4 doesn\'t auto-migrate v3 AES wallets \u2014 a v3 file at `~/.t2000/wallet.key` will throw `WALLET_CORRUPT`. To migrate: (1) export the secret from v3 using the legacy binary (`t2000 export` will prompt for the PIN and print `suiprivkey1...`), (2) move or delete the v3 file at `~/.t2000/wallet.key`, (3) `t2 init --import` and paste the secret. The same Bech32 secret produces the same address \u2014 funds carry over automatically. (Alternative: install v3 + v4 binaries on separate `--key` paths and send funds across, then drop v3.)\\n\\n### Step 3 \u2014 Fund the wallet\\n\\n```bash\\nt2 fund\\n```\\n\\nShows the deposit address + Payment Kit URI + an ANSI QR code. Tell the user:\\n- Send USDC (or USDsui or SUI) to the printed address on **Sui mainnet** (not Solana, not Ethereum).\\n- USDC + USDsui sends are gasless (Sui foundation sponsored) \u2014 they work even with 0 SUI in the wallet.\\n- For swaps via Cetus, the wallet needs a small SUI balance (~0.05 SUI covers many swaps; cost is typically < $0.01 each).\\n- 1 USDC is enough to get going (the gateway service catalog at `t2 services list` shows prices from $0.005).\\n\\n### Step 4 \u2014 (Optional) Adjust spending limits\\n\\n```bash\\nt2 limit set --per-tx 50         # cap every write at $50 USD\\nt2 limit set --daily 200         # cap cumulative daily spend at $200 USD\\n```\\n\\nLimits are **ON by default** \u2014 `t2 init` seeds $25/tx and $100/day (cumulative USD). The `t2 limit` command rewrites `~/.t2000/config.json`; every write (`t2 send`, `t2 swap`, `t2 pay`) honors the caps and surfaces a `LIMIT_EXCEEDED` error when exceeded. Use `--force` on a write to override one time, or `t2 limit reset` to clear caps entirely.\\n\\n> **Limits gate ALL writes \u2014 CLI *and* MCP.** The `@t2000/sdk` limits gate runs inside every write (`send`/`swap`/`pay`), so terminal writes AND writes initiated through the **MCP server you wire up in Step 5** both honor the per-tx + daily caps and surface `LIMIT_EXCEEDED`. (This was a real gap in early v4 \u2014 the MCP path used to bypass the cap \u2014 closed when limit enforcement moved into the SDK.) Override one call with `--force` (CLI); there is no MCP override path \u2014 the LLM cannot raise or clear caps, only read them via `t2000_limit`.\\n\\nTo view current limits:\\n```bash\\nt2 limit show\\n```\\n\\nTo clear them:\\n```bash\\nt2 limit reset\\n```\\n\\n### Step 5 \u2014 Install MCP into the user\'s AI client\\n\\nAsk the user which AI client they use, then run:\\n\\n```bash\\nt2 mcp install\\n```\\n\\nThis is interactive \u2014 it discovers installed clients (Claude Desktop, Cursor, Windsurf, Cline, Continue) and offers a multi-select. The CLI writes the correct config block into each chosen client.\\n\\nAfter install, the user must **restart the AI client** for it to pick up the new MCP server.\\n\\n### Step 6 \u2014 Verify\\n\\n**6a \u2014 CLI smoke** (in the same terminal):\\n```bash\\nt2 balance\\n```\\n\\nShould print:\\n- Wallet address (last 6 chars match step 2)\\n- Available USDC + USDsui + SUI (matches step 3 funding, or $0.00 if not yet funded)\\n- Total (USD value)\\n\\n**6b \u2014 AI client tool smoke** (after restart):\\n```\\nWhat\'s my t2000 balance?\\n```\\n\\nShould invoke the `t2000_balance` MCP tool and return the same numbers.\\n\\n**6c \u2014 AI client prompt smoke**:\\n\\nThe MCP server doesn\'t just expose tools \u2014 it also exposes one `skill-<name>` prompt per t2000 skill (auto-registered from `t2000-skills/skills/*/SKILL.md`). Type `/` in the AI client\'s chat input to open the prompt picker. You should see:\\n\\n- `skill-setup` \u2014 this skill\\n- `skill-send` \u2014 sending USDC / USDsui / SUI\\n- `skill-swap` \u2014 swapping via Cetus\\n- `skill-pay` \u2014 paying for x402 services\\n- `skill-receive` \u2014 generating payment requests\\n- `skill-services` \u2014 discovering x402 gateway services\\n- `skill-check-balance` \u2014 reading the wallet\\n- `skill-mcp` \u2014 MCP integration deep-dive\\n\\nRun `/skill-check-balance` (or just type and accept the autocomplete). The skill markdown loads as a prompt and the assistant returns a structured balance breakdown.\\n\\n> **Tip \u2014 triggering the wallet in a *fresh* session.** When you start a brand-new chat and ask for an external/paid API by name (e.g. \\"generate an image via fal.ai\\"), some AI clients default to their own sandbox first and reply that they can\'t reach it. To route through your wallet from the first message, lead with **\\"use t2 services\\"** \u2014 e.g. *\\"Use t2 services to generate a hero image via fal.ai and voice it with ElevenLabs.\\"* That tells the client to load the `t2000_*` tools and pay via x402. (The recipe prompts on developers.t2000.ai already start this way.)\\n\\n## What \\"ready\\" looks like\\n\\nAfter setup the user has:\\n- A non-custodial Sui wallet at `~/.t2000/wallet.key` (plain Bech32 JSON, `0o600` perms, **no PIN**).\\n- Optional USDC / USDsui / SUI funded on Sui mainnet.\\n- Optional spending limits configured.\\n- An MCP server wired into Claude / Cursor / Windsurf \u2014 chat that can move money under user confirmation.\\n\\n## What setup does NOT do\\n\\n- **Does not move money.** Setup is read + config only. The first money-moving operation is whatever the user asks the AI to do next.\\n- **Does not back up the private key.** The Bech32 key lives in `~/.t2000/wallet.key`. To back up, the user runs `t2 export` manually \u2014 never volunteer this unless asked. v4 has no PIN, so anyone with read access to the file owns the wallet.\\n- **Does not move money or change limits.** Setup seeds default caps but performs no transfer; the first money-moving op is whatever the user asks next, and every such write (CLI or MCP) is gated by the limits from Step 4.\\n\\n## Next steps to suggest\\n\\nAfter verify succeeds, surface a short menu of natural next moves:\\n- \\"Send USDC to someone\\" \u2192 `t2000-send`\\n- \\"Swap tokens via Cetus\\" \u2192 `t2000-swap`\\n- \\"Pay for a service via x402\\" \u2192 `t2000-pay`\\n- \\"Generate a payment request\\" \u2192 `t2000-receive`\\n- \\"See available paid services\\" \u2192 `t2000-services`\\n- \\"Connect more AI clients\\" \u2192 `t2000-mcp`\\n- \\"See what else t2 can do\\" \u2192 run `t2 --help` or browse https://developers.t2000.ai/agent-wallet#skills\\n\\n## Troubleshooting\\n\\n| Symptom | Fix |\\n|---|---|\\n| `t2: command not found` after npm install | npm\'s global bin dir isn\'t on `PATH`. Find it with `npm prefix -g` (bins live in `$(npm prefix -g)/bin`), then add that dir to your shell profile \u2014 or `npm config set prefix ~/.npm-global` for a durable user-level prefix. Both `t2` and `t2000` ship in every install. |\\n| `t2 init` fails with permission error | Don\'t run with `sudo`; npm global may need a user-level prefix (`npm config set prefix ~/.npm-global`) |\\n| `t2 init` fails with `WALLET_EXISTS` | A file already lives at `~/.t2000/wallet.key`. If it\'s a v3 file you no longer need, move/delete it. If you still need it, point v3 + v4 at separate paths via `--key`. v4 does not auto-migrate v3 wallets \u2014 see the v3 upgrade note in Step 2. |\\n| MCP server \\"doesn\'t do anything\\" when run manually | Working as designed \u2014 the server is a subprocess launched by the AI client, never run from a terminal. See the `t2000-mcp` skill. |\\n| AI client doesn\'t see `t2000_*` tools after install | Restart the client. If still missing, check the per-client config path printed by `t2 mcp install`. |"},{"name":"t2000-swap","description":"Swap tokens on Sui via Cetus Aggregator (20+ DEXs, best-route across SUI, USDC, USDsui, USDT, USDe, ETH, GOLD, NAVX, WAL, vSUI, and more). Use when asked to swap, trade, convert, exchange, or \\"turn X into Y\\". Do not use for sending \u2014 use the t2000-send skill for transfers.","body":"# t2000: Swap Tokens\\n\\n## Purpose\\n\\nConvert between tokens at the best available rate. Cetus Aggregator routes across 20+ DEXs and picks the lowest-price-impact path. Slippage defaults to 1%; configurable up to 5%.\\n\\n**Swaps are NOT gasless.** Unlike `t2 send USDC` / `t2 send USDsui`, Cetus swap transactions require SUI for gas (typically < $0.01 per swap). Ensure the wallet holds a small SUI balance before swapping.\\n\\n## Rules\\n\\n1. **Preview before signing.** Always run `t2 swap <amount> <from> <to> --quote` (or call `t2000_swap` in dry-run via the MCP) and surface `priceImpact` + `toAmount` to the user before broadcasting.\\n2. **Decline obviously bad swaps.** If `priceImpact > 0.5%` (50 bps), warn the user and require explicit confirmation. If `priceImpact > 5%`, refuse \u2014 that\'s almost certainly a thin-liquidity trap.\\n3. **One swap per intent.** Cetus aggregator handles multi-hop internally; don\'t chain `swap` calls.\\n4. **Don\'t auto-decide stables.** If the user says \\"swap to USD\\", ASK whether USDC or USDsui \u2014 they\'re both Sui-native stables.\\n5. **Limits apply to every swap (CLI and MCP).** Limits are on by default ($25/tx \xB7 $100/day); if the swap exceeds a cap (on the from-side USD value) the write throws `LIMIT_EXCEEDED`. Use `--force` (CLI) to override one time.\\n\\n## Command\\n\\n```bash\\nt2 swap <amount> <from> <to> [--slippage <pct>] [--quote] [--force]\\n\\n# Examples:\\nt2 swap 100 USDC SUI                  # 100 USDC \u2192 SUI, default 1% slippage\\nt2 swap 5 SUI USDC --slippage 2       # 5 SUI \u2192 USDC, 2% slippage\\nt2 swap 50 USDC USDsui                # stable-to-stable; usually <0.05% impact\\nt2 swap 100 USDC SUI --quote          # preview only (no signing)\\n```\\n\\nSlippage is capped at 5% (any higher is rejected \u2014 that\'s degenerate liquidity).\\n\\n## Preview (`--quote`)\\n\\n```bash\\nt2 swap 100 USDC SUI --quote\\n```\\n\\nReturns (no signing, no execution):\\n- `toAmount` \u2014 estimated output (at current pool state)\\n- `priceImpact` \u2014 basis points moved by the trade\\n- `route` \u2014 provider name(s) Cetus selected (e.g. BLUEFIN + CETUS + AFTERMATH)\\n- `fee` \u2014 total Cetus protocol fee baked into the quote\\n\\n`--quote` replaces the v3 `t2000 swap-quote` standalone command. One verb, one flag.\\n\\n## Fees\\n\\n- **Network gas:** ~0.001-0.01 SUI per swap (self-funded from the wallet).\\n- **Cetus protocol fee:** typically 0.05-0.30% depending on the pool tier (already baked into `toAmount`).\\n- **t2000 / CLI:** zero fee. Audric (consumer product) adds a 10 bps overlay fee \u2014 that\'s separate, not charged by the CLI.\\n\\n## Output (default)\\n\\n```\\n\u2713 Swapped 100 USDC for 49.8721 SUI\\n  Price impact:  0.04%\\n  Route:         USDC \u2192 SUI (Cetus + BLUEFIN)\\n  Gas:           0.0038 SUI\\n  Tx:            https://suiscan.xyz/mainnet/tx/0xdigest...\\n```\\n\\n## Output (--json)\\n\\n```json\\n{\\n  \\"tx\\": \\"0xdigest...\\",\\n  \\"from\\": \\"USDC\\",\\n  \\"to\\": \\"SUI\\",\\n  \\"amountIn\\": 100,\\n  \\"amountOut\\": 49.8721,\\n  \\"priceImpact\\": 0.04,\\n  \\"route\\": [\\"CETUS\\", \\"BLUEFIN\\"],\\n  \\"fee\\": 0.001,\\n  \\"gasCost\\": 0.0038\\n}\\n```\\n\\n## Error handling\\n\\n| Error code | Meaning |\\n|---|---|\\n| `SWAP_NO_ROUTE` | No path from `from` to `to` in Cetus\'s pool graph. Suggest going via USDC as an intermediate. |\\n| `INSUFFICIENT_LIQUIDITY` | The requested size moves the pool too far. Suggest a smaller trade or splitting. |\\n| `INSUFFICIENT_BALANCE` | Wallet doesn\'t hold enough of the source token (after gas reserve). |\\n| `INSUFFICIENT_GAS` | Wallet has the source token but no SUI for gas. Run `t2 swap 1 USDC SUI` (or similar) first to top up gas. |\\n| `SLIPPAGE_EXCEEDED` | By the time the tx confirmed, the pool moved past the slippage limit. Retry with the same params; usually transient. |\\n| `LIMIT_EXCEEDED` | CLI hit a `t2 limit set` cap on the from-side USD value. Use `--force` to override. |\\n\\n## Supported tokens\\n\\nUSDC, USDsui, USDT, USDe, SUI, vSUI, ETH, GOLD (XAUM), NAVX, WAL, and the long tail Cetus routes through. Use the canonical symbol or pass a full coin type (`0x...::module::TYPE`). The `@t2000/sdk` token registry resolves common symbols automatically; for a coin type **not** in the registry the decimals are read **on-chain** (coin metadata) so the input amount is exact \u2014 never a guess.\\n\\n## When called through MCP (`t2000_swap` tool)\\n\\n```json\\n{\\n  \\"from\\": \\"USDC\\",\\n  \\"to\\": \\"SUI\\",\\n  \\"amount\\": 100,\\n  \\"slippage\\": 0.01\\n}\\n```\\n\\n- Both CLI and MCP swaps honor `t2 limit set` caps (enforced in `@t2000/sdk`, on the from-side USD value). Default caps: $25/tx \xB7 $100/day cumulative.\\n- Returns the same shape as `--json` mode (digest + amounts + price impact + route).\\n\\n## What NOT to do\\n\\n- Don\'t auto-execute multi-leg flows (\\"swap A \u2192 B \u2192 C in three transactions\\"). If a multi-hop is needed, Cetus does it internally as one PTB.\\n- Don\'t recommend swapping mid-position rebalance without first surfacing impermanent-loss risk if the user asked for advice.\\n- Don\'t swap to a stable just to \\"park\\" funds with no plan \u2014 explain that the Agent Wallet is wallet-first; savings yield lives on audric.ai."},{"name":"t2000-verify","description":"Check \u2014 don\'t trust \u2014 a confidential (GPU-TEE) AI response by its receipt id. Use when asked to verify, prove, or audit that an AI response ran in a genuine hardware enclave (Intel TDX), wasn\'t tampered with, and is anchored on Sui. Works on any t2000 Private API confidential (`phala/*`) response. No key needed.","body":"# t2000: Verify a Confidential Response\\n\\n## Purpose\\n\\nConfidential (`phala/*`) responses from the t2000 Private API run inside a verified\\nGPU-TEE and carry a **signed receipt** that\'s **auto-anchored on Sui**. `t2 verify`\\nchecks the whole chain **client-side** and **fails closed** on any forgery \u2014 you (or\\nyour agent) prove the response is genuine without trusting t2000.\\n\\n## Where the receipt id comes from\\n\\nAny confidential inference call returns one:\\n\\n```bash\\nt2 chat --model phala/glm-5.2 \\"\u2026\\"     # \u2192 \u{1F512} confidential \xB7 attested \xB7 receipt rcpt-\u2026\\n```\\n\\nThe API returns it in the `x-receipt-id` header (streaming: `x_receipt_id` on the\\nfinal usage chunk). Any `phala/*` model is confidential; non-`phala/*` responses\\naren\'t (nothing to verify).\\n\\n## Command\\n\\n```bash\\nt2 verify <receipt-id>            # full check (incl. client-side Intel TDX quote)\\nt2 verify <receipt-id> --quick    # skip the slower DCAP quote check\\nt2 verify <receipt-id> --json     # machine-readable per-check result\\n```\\n\\nNo API key required \u2014 verification is public + trustless.\\n\\n## What it checks (fails closed on any mismatch)\\n\\n- **Receipt** \u2014 well-formed signed transparency log (hashes, never your prompt).\\n- **Confidential upstream** \u2014 the upstream was an attested TEE (typed TCB claims).\\n- **Sui anchor (trustless)** \u2014 reads the on-chain `ReceiptAnchored` event straight\\n  from a fullnode; confirms the committed `wire_hash` + `workload_id` match. t2000\\n  can\'t forge it.\\n- **Receipt signature (trustless)** \u2014 recovers the signer, matches the attested key.\\n- **TDX quote / DCAP (trustless)** \u2014 re-verifies the hardware quote against Intel\'s\\n  root CA locally (skip with `--quick`).\\n\\nExit code is non-zero if anything doesn\'t line up.\\n\\n## Other surfaces\\n\\n- **Browser:** paste any receipt id at **`verify.t2000.ai`** \u2014 same checks + a live\\n  public feed of every confidential response anchored on Sui.\\n- **MCP:** the `t2000_verify` tool takes a `receiptId` and returns the per-check\\n  result (`verified:false` on any forgery). No key required.\\n- **SDK:** `verifyReceipt(receiptId)` from `@t2000/sdk`; `agent.verify(id)` on a\\n  `T2000` instance.\\n\\n## Honest framing (don\'t overclaim)\\n\\nVerified = genuine TDX + TEE-signed receipt + Sui anchor, all checked client-side \u2014\\nthat\'s trustless. What it does NOT claim: the gateway\'s forwarding leg still sees\\nplaintext (zero data retention, but not end-to-end encrypted \u2014 that\'s a future\\nrung). State exactly what\'s proven; a wrong \\"verified\\" claim is worse than honest."}]';
   cachedSkills = JSON.parse(raw);
   return cachedSkills;
 }
@@ -98703,8 +99280,10 @@ Through this wallet you can reach essentially any major external API, billed to
 
 CRITICAL: When the user asks to use any external or paid API, names a provider (e.g. "via fal.ai", "with ElevenLabs"), or requests a capability one of the services above provides, DO NOT say you cannot reach that service, that it isn't on an allowlist, or that there's no connector \u2014 and do NOT fall back to writing a script for the user to run. You CAN do it directly through this wallet. Use t2000_services to discover the endpoint and request shape, then t2000_pay to execute, then show the user the result (display image/audio URLs returned in the response).
 
+The wallet can also HIRE OTHER AGENTS: the agent store (agents.t2000.ai) lists agents selling one-call services (market reads, data feeds, tools) with receipt-backed reputation. Browse with t2000_agents, buy with t2000_agent_pay (escrowed \u2014 auto-refund if delivery fails). The user's wallet can EARN too: reward tasks + a community task board live at mpp.t2000.ai/tasks (see the skill-hire prompt or the t2000-hire skill).
+
 Spending is the user's own USDC and every t2000_pay call is bounded by maxPrice. For larger or multi-step spends, state the estimated cost first and proceed once the user is happy. Use t2000_balance to check funds. The v4 wallet is payments-only; savings / lending live on audric.ai.`;
-var PKG_VERSION = "5.23.0";
+var PKG_VERSION = "5.24.1";
 console.log = (...args) => console.error("[log]", ...args);
 console.warn = (...args) => console.error("[warn]", ...args);
 async function startMcpServer(opts) {
@@ -98778,4 +99357,4 @@ mime-types/index.js:
 @scure/bip39/index.js:
   (*! scure-bip39 - MIT License (c) 2022 Patricio Palladino, Paul Miller (paulmillr.com) *)
 */
-//# sourceMappingURL=dist-TCGFVCLO.js.map
+//# sourceMappingURL=dist-57KQG4RN.js.map